[2025-09-08 00:02:03][351331724408277][1 ms][INFO] === Request start === [2025-09-08 00:02:03][351331724408277][2 ms][DEBUG] START check_scloud [2025-09-08 00:02:03][351331724408277][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 00:02:04][351331724408277][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 31840 5020 24283052 169648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 00:02:04][351331724408277][285 ms][DEBUG] targetPkg: running [2025-09-08 00:02:04][351331724408277][286 ms][DEBUG] END check_scloud in 284 ms [2025-09-08 00:02:04][351331724408277][286 ms][DEBUG] START check_boot_completed [2025-09-08 00:02:04][351331724408277][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 00:02:04][351331724408277][317 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 00:02:04][351331724408277][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 00:02:04][351331724408277][364 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 00:02:04][351331724408277][364 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 00:02:04][351331724408277][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 00:02:04][351331724408277][520 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5877\nsuccessfulTxPacketsPerSecond: 0.03578643954206371\nretriedTxPackets: 1250\nretriedTxPacketsPerSecond: 0.03578643954206371\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5691\nsuccessfulRxPacketsPerSecond: 0.022773188799495084\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 00:02:04][351331724408277][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 00:02:05][351331724408277][1973 ms][DEBUG] SU: done in 1453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=405 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 405.899/405.899/405.899/0.000 ms\n [2025-09-08 00:02:05][351331724408277][1973 ms][DEBUG] check_internet: online [2025-09-08 00:02:05][351331724408277][1973 ms][DEBUG] rawBody.length=1150 [2025-09-08 00:02:05][351331724408277][1973 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351331724408277\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2728\"}'\'' -e'"" [2025-09-08 00:02:05][351331724408277][1973 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 00:02:05][351331724408277][1973 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351331724408277\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2728\"}'\'' -e'"" [2025-09-08 00:02:09][351331724408277][5893 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c9e1dec-091b-4798-b6bc-d83e30e9a823","id":"QR_8c9e1dec-091b-4798-b6bc-d83e30e9a823","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 00:02:10][351331724408277][6050 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-09-08 00:02:10][351331724408277][6050 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-09-08 00:02:10][351331724408277][6050 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 00:02:12][351331724408277][1 ms][INFO] === Request start === [2025-09-08 00:02:12][351331724408277][1 ms][DEBUG] START check_scloud [2025-09-08 00:02:12][351331724408277][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 00:02:12][351331724408277][235 ms][DEBUG] SU: done in 234 ms; outu0_a118 31840 5020 24471744 181352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 00:02:12][351331724408277][235 ms][DEBUG] targetPkg: running [2025-09-08 00:02:12][351331724408277][235 ms][DEBUG] END check_scloud in 234 ms [2025-09-08 00:02:12][351331724408277][235 ms][DEBUG] START check_boot_completed [2025-09-08 00:02:12][351331724408277][235 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 00:02:12][351331724408277][282 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 00:02:12][351331724408277][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 00:02:12][351331724408277][329 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 00:02:12][351331724408277][329 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 00:02:12][351331724408277][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 00:02:12][351331724408277][454 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5877\nsuccessfulTxPacketsPerSecond: 0.03578643954206371\nretriedTxPackets: 1250\nretriedTxPacketsPerSecond: 0.03578643954206371\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5691\nsuccessfulRxPacketsPerSecond: 0.022773188799495084\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 00:02:12][351331724408277][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 00:02:13][351331724408277][892 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=317 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 317.619/317.619/317.619/0.000 ms\n [2025-09-08 00:02:13][351331724408277][892 ms][DEBUG] check_internet: online [2025-09-08 00:02:13][351331724408277][893 ms][DEBUG] rawBody.length=1160 [2025-09-08 00:02:13][351331724408277][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351331724408277\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5305\"}'\'' -e'"" [2025-09-08 00:02:13][351331724408277][893 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 00:02:13][351331724408277][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351331724408277\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5305\"}'\'' -e'"" [2025-09-08 00:02:18][351331724408277][5843 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ed6a9b9-214a-478d-8776-e95a9f919256","id":"QR_5ed6a9b9-214a-478d-8776-e95a9f919256","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 00:02:18][351331724408277][5999 ms][DEBUG] proc_open done in 5106 ms; code=255; res.len=3343 [2025-09-08 00:02:18][351331724408277][5999 ms][DEBUG] END runCmdUntilRes#1 in 5106 ms [2025-09-08 00:02:18][351331724408277][5999 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 00:30:04][356556775289557][1 ms][INFO] === Request start === [2025-09-08 00:30:04][356556775289557][1 ms][DEBUG] START check_scloud [2025-09-08 00:30:04][356556775289557][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 00:30:05][356556775289557][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 31840 5020 24545588 183940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 00:30:05][356556775289557][309 ms][DEBUG] targetPkg: running [2025-09-08 00:30:05][356556775289557][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 00:30:05][356556775289557][309 ms][DEBUG] START check_boot_completed [2025-09-08 00:30:05][356556775289557][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 00:30:05][356556775289557][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 00:30:05][356556775289557][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 00:30:05][356556775289557][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 00:30:05][356556775289557][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 00:30:05][356556775289557][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 00:30:05][356556775289557][512 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6106\nsuccessfulTxPacketsPerSecond: 0.024314767269309742\nretriedTxPackets: 1311\nretriedTxPacketsPerSecond: 0.004717790664194428\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5900\nsuccessfulRxPacketsPerSecond: 0.02104860450179052\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 00:30:05][356556775289557][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 00:30:06][356556775289557][1950 ms][DEBUG] SU: done in 1437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.326/301.326/301.326/0.000 ms\n [2025-09-08 00:30:06][356556775289557][1950 ms][DEBUG] check_internet: online [2025-09-08 00:30:06][356556775289557][1950 ms][DEBUG] rawBody.length=1160 [2025-09-08 00:30:06][356556775289557][1950 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356556775289557\",\"model\":\"SM-N986U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SPR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1227\"}'\'' -e'"" [2025-09-08 00:30:06][356556775289557][1950 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 00:30:06][356556775289557][1950 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356556775289557\",\"model\":\"SM-N986U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SPR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1227\"}'\'' -e'"" [2025-09-08 00:30:11][356556775289557][6886 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e779818-b5d2-4393-8f7f-eaf7a05effb8","id":"QR_3e779818-b5d2-4393-8f7f-eaf7a05effb8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 00:30:11][356556775289557][7042 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-08 00:30:11][356556775289557][7042 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-08 00:30:11][356556775289557][7042 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 00:30:15][356556775289557][0 ms][INFO] === Request start === [2025-09-08 00:30:15][356556775289557][1 ms][DEBUG] START check_scloud [2025-09-08 00:30:15][356556775289557][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 00:30:15][356556775289557][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 31840 5020 24689288 186404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 00:30:15][356556775289557][310 ms][DEBUG] targetPkg: running [2025-09-08 00:30:15][356556775289557][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 00:30:15][356556775289557][310 ms][DEBUG] START check_boot_completed [2025-09-08 00:30:15][356556775289557][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 00:30:15][356556775289557][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 00:30:15][356556775289557][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 00:30:15][356556775289557][405 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 00:30:15][356556775289557][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 00:30:15][356556775289557][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 00:30:15][356556775289557][560 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6106\nsuccessfulTxPacketsPerSecond: 0.024314767269309742\nretriedTxPackets: 1311\nretriedTxPacketsPerSecond: 0.004717790664194428\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5900\nsuccessfulRxPacketsPerSecond: 0.02104860450179052\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 00:30:15][356556775289557][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 00:30:16][356556775289557][982 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=313 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 313.368/313.368/313.368/0.000 ms\n [2025-09-08 00:30:16][356556775289557][982 ms][DEBUG] check_internet: online [2025-09-08 00:30:16][356556775289557][982 ms][DEBUG] rawBody.length=1150 [2025-09-08 00:30:16][356556775289557][982 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356556775289557\",\"model\":\"SM-N986U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SPR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8162\"}'\'' -e'"" [2025-09-08 00:30:16][356556775289557][982 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 00:30:16][356556775289557][982 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356556775289557\",\"model\":\"SM-N986U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SPR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8162\"}'\'' -e'"" [2025-09-08 00:30:20][356556775289557][4840 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_51b33179-b45c-43fb-a7f5-802961bc20bf","id":"QR_51b33179-b45c-43fb-a7f5-802961bc20bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 00:30:20][356556775289557][4996 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-09-08 00:30:20][356556775289557][4996 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-09-08 00:30:20][356556775289557][4996 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 00:45:03][351272338561012][1 ms][INFO] === Request start === [2025-09-08 00:45:03][351272338561012][1 ms][DEBUG] START check_scloud [2025-09-08 00:45:03][351272338561012][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 00:45:04][351272338561012][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 31840 5020 24781244 160596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 00:45:04][351272338561012][317 ms][DEBUG] targetPkg: running [2025-09-08 00:45:04][351272338561012][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 00:45:04][351272338561012][317 ms][DEBUG] START check_boot_completed [2025-09-08 00:45:04][351272338561012][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 00:45:04][351272338561012][348 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 00:45:04][351272338561012][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 00:45:04][351272338561012][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 00:45:04][351272338561012][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 00:45:04][351272338561012][395 ms][DEBUG] rawBody.length=1150 [2025-09-08 00:45:04][351272338561012][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338561012\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6996\"}'\'' -e'"" [2025-09-08 00:45:04][351272338561012][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 00:45:04][351272338561012][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338561012\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6996\"}'\'' -e'"" [2025-09-08 00:45:09][351272338561012][5675 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b59552b4-2b20-43ae-86b7-81ef9d734eab","id":"QR_b59552b4-2b20-43ae-86b7-81ef9d734eab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 00:45:09][351272338561012][5831 ms][DEBUG] proc_open done in 5435 ms; code=255; res.len=3343 [2025-09-08 00:45:09][351272338561012][5831 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-08 00:45:09][351272338561012][5831 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 00:45:11][351272338561012][0 ms][INFO] === Request start === [2025-09-08 00:45:11][351272338561012][1 ms][DEBUG] START check_scloud [2025-09-08 00:45:11][351272338561012][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 00:45:12][351272338561012][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 31840 5020 24953616 154252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 00:45:12][351272338561012][280 ms][DEBUG] targetPkg: running [2025-09-08 00:45:12][351272338561012][280 ms][DEBUG] END check_scloud in 280 ms [2025-09-08 00:45:12][351272338561012][280 ms][DEBUG] START check_boot_completed [2025-09-08 00:45:12][351272338561012][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 00:45:12][351272338561012][327 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 00:45:12][351272338561012][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 00:45:12][351272338561012][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 00:45:12][351272338561012][374 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 00:45:12][351272338561012][374 ms][DEBUG] rawBody.length=1160 [2025-09-08 00:45:12][351272338561012][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338561012\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1802\"}'\'' -e'"" [2025-09-08 00:45:12][351272338561012][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 00:45:12][351272338561012][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338561012\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1802\"}'\'' -e'"" [2025-09-08 00:45:17][351272338561012][5513 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31b6d2b2-e09b-4df1-82b8-3ea91b19b1aa","id":"QR_31b6d2b2-e09b-4df1-82b8-3ea91b19b1aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 00:45:17][351272338561012][5669 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 00:45:17][351272338561012][5669 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 00:45:17][351272338561012][5670 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 00:51:05][352889210041331][1 ms][INFO] === Request start === [2025-09-08 00:51:05][352889210041331][1 ms][DEBUG] START check_scloud [2025-09-08 00:51:05][352889210041331][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 00:51:05][352889210041331][272 ms][DEBUG] SU: done in 270 ms; outu0_a118 31840 5020 25090004 152768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 00:51:05][352889210041331][272 ms][DEBUG] targetPkg: running [2025-09-08 00:51:05][352889210041331][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-08 00:51:05][352889210041331][272 ms][DEBUG] START check_boot_completed [2025-09-08 00:51:05][352889210041331][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 00:51:05][352889210041331][303 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 00:51:05][352889210041331][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 00:51:05][352889210041331][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 00:51:05][352889210041331][350 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 00:51:05][352889210041331][350 ms][DEBUG] rawBody.length=1160 [2025-09-08 00:51:05][352889210041331][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352889210041331\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9695\"}'\'' -e'"" [2025-09-08 00:51:05][352889210041331][350 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 00:51:05][352889210041331][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352889210041331\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9695\"}'\'' -e'"" [2025-09-08 00:51:09][352889210041331][4411 ms][DEBUG] proc_open done in 4061 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 00:51:09][352889210041331][4411 ms][DEBUG] END runCmdUntilRes#1 in 4062 ms [2025-09-08 00:51:09][352889210041331][4411 ms][WARN] Detected error: Process with pid 31840 either refused to load frida-agent, or terminated during injectionProcess with pid 31840 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 00:51:09][352889210041331][4411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 00:51:09][352889210041331][4661 ms][DEBUG] SU: done in 250 ms; outsystem 5440 5020 12749824 204516 ep_poll 0 S system_server\n [2025-09-08 00:51:09][352889210041331][4661 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 00:51:10][352889210041331][4802 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 00:51:10][352889210041331][4802 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 00:51:10][352889210041331][4802 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 00:51:10][352889210041331][4942 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 00:51:10][352889210041331][4942 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 00:51:10][352889210041331][5130 ms][DEBUG] SU: done in 188 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 00:51:12][352889210041331][7145 ms][DEBUG] START check_boot_completed [2025-09-08 00:51:12][352889210041331][7145 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 00:51:12][352889210041331][7192 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 00:51:12][352889210041331][7192 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 00:51:12][352889210041331][7239 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 00:51:12][352889210041331][7239 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 00:51:15][352889210041331][10254 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 00:51:15][352889210041331][10254 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352889210041331\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9695\"}'\'' -e'"" [2025-09-08 00:51:20][352889210041331][15518 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cda44a16-e25f-4430-92e4-0c0fd392bfe5","id":"QR_cda44a16-e25f-4430-92e4-0c0fd392bfe5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 00:51:20][352889210041331][15674 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-08 00:51:20][352889210041331][15674 ms][DEBUG] END runCmdUntilRes#2 in 5421 ms [2025-09-08 00:51:20][352889210041331][15675 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 00:51:24][352889210041331][0 ms][INFO] === Request start === [2025-09-08 00:51:24][352889210041331][1 ms][DEBUG] START check_scloud [2025-09-08 00:51:24][352889210041331][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 00:51:24][352889210041331][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 4124 5020 23778336 124640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 00:51:24][352889210041331][258 ms][DEBUG] targetPkg: running [2025-09-08 00:51:24][352889210041331][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-08 00:51:24][352889210041331][258 ms][DEBUG] START check_boot_completed [2025-09-08 00:51:24][352889210041331][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 00:51:24][352889210041331][304 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 00:51:24][352889210041331][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 00:51:24][352889210041331][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 00:51:24][352889210041331][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 00:51:24][352889210041331][351 ms][DEBUG] rawBody.length=1150 [2025-09-08 00:51:24][352889210041331][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352889210041331\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8880\"}'\'' -e'"" [2025-09-08 00:51:24][352889210041331][351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 00:51:24][352889210041331][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352889210041331\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8880\"}'\'' -e'"" [2025-09-08 00:51:28][352889210041331][4256 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54c76693-05ba-451b-a0f8-93b07e86bb25","id":"QR_54c76693-05ba-451b-a0f8-93b07e86bb25","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 00:51:28][352889210041331][4413 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-08 00:51:28][352889210041331][4413 ms][DEBUG] END runCmdUntilRes#1 in 4062 ms [2025-09-08 00:51:28][352889210041331][4413 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 01:12:04][356664830689330][1 ms][INFO] === Request start === [2025-09-08 01:12:04][356664830689330][1 ms][DEBUG] START check_scloud [2025-09-08 01:12:04][356664830689330][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 01:12:04][356664830689330][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 4124 5020 23848860 139048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 01:12:04][356664830689330][304 ms][DEBUG] targetPkg: running [2025-09-08 01:12:04][356664830689330][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 01:12:04][356664830689330][304 ms][DEBUG] START check_boot_completed [2025-09-08 01:12:04][356664830689330][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 01:12:04][356664830689330][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 01:12:04][356664830689330][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 01:12:04][356664830689330][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 01:12:04][356664830689330][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 01:12:04][356664830689330][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 01:12:05][356664830689330][507 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6791\nsuccessfulTxPacketsPerSecond: 0.21244954323348206\nretriedTxPackets: 1470\nretriedTxPacketsPerSecond: 0.053112385808370514\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6520\nsuccessfulRxPacketsPerSecond: 0.20581049500743573\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 01:12:05][356664830689330][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 01:12:06][356664830689330][2022 ms][DEBUG] SU: done in 1515 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.788/301.788/301.788/0.000 ms\n [2025-09-08 01:12:06][356664830689330][2022 ms][DEBUG] check_internet: online [2025-09-08 01:12:06][356664830689330][2022 ms][DEBUG] rawBody.length=1160 [2025-09-08 01:12:06][356664830689330][2022 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356664830689330\",\"model\":\"SM-F926U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7337\"}'\'' -e'"" [2025-09-08 01:12:06][356664830689330][2022 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 01:12:06][356664830689330][2022 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356664830689330\",\"model\":\"SM-F926U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7337\"}'\'' -e'"" [2025-09-08 01:12:10][356664830689330][5928 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-08 01:12:10][356664830689330][6084 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=101 [2025-09-08 01:12:10][356664830689330][6084 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-08 01:12:10][356664830689330][6084 ms][INFO] SUCCESS response from frida (len=101) [2025-09-08 01:12:10][][0 ms][INFO] === Request start === [2025-09-08 01:12:10][][1 ms][DEBUG] START check_scloud [2025-09-08 01:12:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 01:12:11][][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 4124 5020 24019120 150096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 01:12:11][][255 ms][DEBUG] targetPkg: running [2025-09-08 01:12:11][][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-08 01:12:11][][255 ms][DEBUG] START check_boot_completed [2025-09-08 01:12:11][][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 01:12:11][][302 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 01:12:11][][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 01:12:11][][364 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 01:12:11][][364 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 01:12:11][][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 01:12:11][][474 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6791\nsuccessfulTxPacketsPerSecond: 0.21244954323348206\nretriedTxPackets: 1470\nretriedTxPacketsPerSecond: 0.053112385808370514\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6520\nsuccessfulRxPacketsPerSecond: 0.20581049500743573\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 01:12:11][][474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 01:12:11][][817 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.809/227.809/227.809/0.000 ms\n [2025-09-08 01:12:11][][817 ms][DEBUG] check_internet: online [2025-09-08 01:12:11][][817 ms][DEBUG] rawBody.length=1141 [2025-09-08 01:12:11][][817 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F926U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CR8037MFP\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6066\"}'\'' -e'"" [2025-09-08 01:12:11][][818 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 01:12:11][][818 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F926U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CR8037MFP\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6066\"}'\'' -e'"" [2025-09-08 01:12:15][][4426 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-08 01:12:15][][4582 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=101 [2025-09-08 01:12:15][][4582 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-08 01:12:15][][4582 ms][INFO] SUCCESS response from frida (len=101) [2025-09-08 01:12:15][356664830689330][0 ms][INFO] === Request start === [2025-09-08 01:12:15][356664830689330][1 ms][DEBUG] START check_scloud [2025-09-08 01:12:15][356664830689330][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 01:12:16][356664830689330][251 ms][DEBUG] SU: done in 251 ms; outu0_a118 4124 5020 24159608 161876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 01:12:16][356664830689330][252 ms][DEBUG] targetPkg: running [2025-09-08 01:12:16][356664830689330][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-08 01:12:16][356664830689330][252 ms][DEBUG] START check_boot_completed [2025-09-08 01:12:16][356664830689330][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 01:12:16][356664830689330][298 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 01:12:16][356664830689330][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 01:12:16][356664830689330][361 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 01:12:16][356664830689330][361 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 01:12:16][356664830689330][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 01:12:16][356664830689330][486 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6791\nsuccessfulTxPacketsPerSecond: 0.21244954323348206\nretriedTxPackets: 1470\nretriedTxPacketsPerSecond: 0.053112385808370514\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6520\nsuccessfulRxPacketsPerSecond: 0.20581049500743573\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 01:12:16][356664830689330][486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 01:12:16][356664830689330][829 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.633/227.633/227.633/0.000 ms\n [2025-09-08 01:12:16][356664830689330][829 ms][DEBUG] check_internet: online [2025-09-08 01:12:16][356664830689330][829 ms][DEBUG] rawBody.length=1150 [2025-09-08 01:12:16][356664830689330][829 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356664830689330\",\"model\":\"SM-F926U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6391\"}'\'' -e'"" [2025-09-08 01:12:16][356664830689330][829 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 01:12:16][356664830689330][829 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356664830689330\",\"model\":\"SM-F926U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6391\"}'\'' -e'"" [2025-09-08 01:12:21][356664830689330][5500 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06c97a3a-dfb3-47ee-8483-f66b16fa54d4","id":"QR_06c97a3a-dfb3-47ee-8483-f66b16fa54d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 01:12:21][356664830689330][5656 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-08 01:12:21][356664830689330][5656 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-08 01:12:21][356664830689330][5656 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 01:35:04][352967355186564][1 ms][INFO] === Request start === [2025-09-08 01:35:04][352967355186564][1 ms][DEBUG] START check_scloud [2025-09-08 01:35:04][352967355186564][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 01:35:05][352967355186564][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 4124 5020 24256968 145164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 01:35:05][352967355186564][320 ms][DEBUG] targetPkg: running [2025-09-08 01:35:05][352967355186564][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 01:35:05][352967355186564][320 ms][DEBUG] START check_boot_completed [2025-09-08 01:35:05][352967355186564][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 01:35:05][352967355186564][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 01:35:05][352967355186564][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 01:35:05][352967355186564][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 01:35:05][352967355186564][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 01:35:05][352967355186564][398 ms][DEBUG] rawBody.length=1160 [2025-09-08 01:35:05][352967355186564][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967355186564\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9345\"}'\'' -e'"" [2025-09-08 01:35:05][352967355186564][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 01:35:05][352967355186564][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967355186564\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9345\"}'\'' -e'"" [2025-09-08 01:35:11][352967355186564][6240 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_972f5de6-2056-4161-a3b5-47e66cf4f25a","id":"QR_972f5de6-2056-4161-a3b5-47e66cf4f25a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 01:35:11][352967355186564][6397 ms][DEBUG] proc_open done in 5998 ms; code=255; res.len=3343 [2025-09-08 01:35:11][352967355186564][6397 ms][DEBUG] END runCmdUntilRes#1 in 5998 ms [2025-09-08 01:35:11][352967355186564][6397 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 01:35:14][352967355186564][0 ms][INFO] === Request start === [2025-09-08 01:35:14][352967355186564][1 ms][DEBUG] START check_scloud [2025-09-08 01:35:14][352967355186564][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 01:35:15][352967355186564][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 4124 5020 24421148 150872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 01:35:15][352967355186564][312 ms][DEBUG] targetPkg: running [2025-09-08 01:35:15][352967355186564][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 01:35:15][352967355186564][312 ms][DEBUG] START check_boot_completed [2025-09-08 01:35:15][352967355186564][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 01:35:15][352967355186564][357 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 01:35:15][352967355186564][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 01:35:15][352967355186564][405 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 01:35:15][352967355186564][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 01:35:15][352967355186564][406 ms][DEBUG] rawBody.length=1150 [2025-09-08 01:35:15][352967355186564][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967355186564\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4522\"}'\'' -e'"" [2025-09-08 01:35:15][352967355186564][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 01:35:15][352967355186564][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967355186564\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4522\"}'\'' -e'"" [2025-09-08 01:35:19][352967355186564][4356 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6eb6fcc3-b33a-451b-9f8e-ba7f9b0f80cb","id":"QR_6eb6fcc3-b33a-451b-9f8e-ba7f9b0f80cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 01:35:19][352967355186564][4512 ms][DEBUG] proc_open done in 4107 ms; code=255; res.len=3343 [2025-09-08 01:35:19][352967355186564][4512 ms][DEBUG] END runCmdUntilRes#1 in 4107 ms [2025-09-08 01:35:19][352967355186564][4513 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 02:00:05][353677436052078][1 ms][INFO] === Request start === [2025-09-08 02:00:05][353677436052078][1 ms][DEBUG] START check_scloud [2025-09-08 02:00:05][353677436052078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 02:00:05][353677436052078][321 ms][DEBUG] SU: done in 319 ms; outu0_a118 4124 5020 24490896 134112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 02:00:05][353677436052078][321 ms][DEBUG] targetPkg: running [2025-09-08 02:00:05][353677436052078][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-08 02:00:05][353677436052078][321 ms][DEBUG] START check_boot_completed [2025-09-08 02:00:05][353677436052078][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 02:00:05][353677436052078][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 02:00:05][353677436052078][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 02:00:05][353677436052078][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 02:00:05][353677436052078][399 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 02:00:05][353677436052078][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 02:00:05][353677436052078][509 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7260\nsuccessfulTxPacketsPerSecond: 0.048059722214805596\nretriedTxPackets: 1616\nretriedTxPacketsPerSecond: 0.037379783944848796\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6956\nsuccessfulRxPacketsPerSecond: 0.0427197530798272\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 02:00:05][353677436052078][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 02:00:07][353677436052078][1867 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.114/292.114/292.114/0.000 ms\n [2025-09-08 02:00:07][353677436052078][1867 ms][DEBUG] check_internet: online [2025-09-08 02:00:07][353677436052078][1867 ms][DEBUG] rawBody.length=1160 [2025-09-08 02:00:07][353677436052078][1867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353677436052078\",\"model\":\"SM-F731U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9373\"}'\'' -e'"" [2025-09-08 02:00:07][353677436052078][1867 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 02:00:07][353677436052078][1867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353677436052078\",\"model\":\"SM-F731U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9373\"}'\'' -e'"" [2025-09-08 02:00:12][353677436052078][7007 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_505f1b1b-4c25-4fea-abd2-dd9639ab22fa","id":"QR_505f1b1b-4c25-4fea-abd2-dd9639ab22fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 02:00:12][353677436052078][7163 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 02:00:12][353677436052078][7163 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-09-08 02:00:12][353677436052078][7163 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 02:00:15][353677436052078][0 ms][INFO] === Request start === [2025-09-08 02:00:15][353677436052078][1 ms][DEBUG] START check_scloud [2025-09-08 02:00:15][353677436052078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 02:00:16][353677436052078][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 4124 5020 24685796 139700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 02:00:16][353677436052078][295 ms][DEBUG] targetPkg: running [2025-09-08 02:00:16][353677436052078][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-08 02:00:16][353677436052078][295 ms][DEBUG] START check_boot_completed [2025-09-08 02:00:16][353677436052078][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 02:00:16][353677436052078][326 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 02:00:16][353677436052078][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 02:00:16][353677436052078][389 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 02:00:16][353677436052078][389 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 02:00:16][353677436052078][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 02:00:16][353677436052078][514 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7260\nsuccessfulTxPacketsPerSecond: 0.048059722214805596\nretriedTxPackets: 1616\nretriedTxPacketsPerSecond: 0.037379783944848796\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6956\nsuccessfulRxPacketsPerSecond: 0.0427197530798272\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 02:00:16][353677436052078][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 02:00:16][353677436052078][920 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=279 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 279.348/279.348/279.348/0.000 ms\n [2025-09-08 02:00:16][353677436052078][920 ms][DEBUG] check_internet: online [2025-09-08 02:00:16][353677436052078][920 ms][DEBUG] rawBody.length=1150 [2025-09-08 02:00:16][353677436052078][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353677436052078\",\"model\":\"SM-F731U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2226\"}'\'' -e'"" [2025-09-08 02:00:16][353677436052078][920 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 02:00:16][353677436052078][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353677436052078\",\"model\":\"SM-F731U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2226\"}'\'' -e'"" [2025-09-08 02:00:20][353677436052078][4794 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5c2b019-6cd8-43d4-969b-b52d08f55273","id":"QR_c5c2b019-6cd8-43d4-969b-b52d08f55273","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 02:00:20][353677436052078][4950 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-08 02:00:20][353677436052078][4950 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-08 02:00:20][353677436052078][4950 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 02:03:03][354601551126771][1 ms][INFO] === Request start === [2025-09-08 02:03:03][354601551126771][1 ms][DEBUG] START check_scloud [2025-09-08 02:03:03][354601551126771][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 02:03:04][354601551126771][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 4124 5020 24833956 142460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 02:03:04][354601551126771][270 ms][DEBUG] targetPkg: running [2025-09-08 02:03:04][354601551126771][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-08 02:03:04][354601551126771][270 ms][DEBUG] START check_boot_completed [2025-09-08 02:03:04][354601551126771][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 02:03:04][354601551126771][301 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 02:03:04][354601551126771][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 02:03:04][354601551126771][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 02:03:04][354601551126771][349 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 02:03:04][354601551126771][349 ms][DEBUG] rawBody.length=1150 [2025-09-08 02:03:04][354601551126771][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601551126771\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5524\"}'\'' -e'"" [2025-09-08 02:03:04][354601551126771][349 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 02:03:04][354601551126771][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601551126771\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5524\"}'\'' -e'"" [2025-09-08 02:03:09][354601551126771][5738 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2af1b1e8-bb09-41f3-9f76-20ce4d6a60ee","id":"QR_2af1b1e8-bb09-41f3-9f76-20ce4d6a60ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 02:03:09][354601551126771][5894 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=3343 [2025-09-08 02:03:09][354601551126771][5894 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-09-08 02:03:09][354601551126771][5894 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 02:03:12][354601551126771][0 ms][INFO] === Request start === [2025-09-08 02:03:12][354601551126771][1 ms][DEBUG] START check_scloud [2025-09-08 02:03:12][354601551126771][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 02:03:12][354601551126771][265 ms][DEBUG] SU: done in 265 ms; outu0_a118 4124 5020 24969512 153448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 02:03:12][354601551126771][265 ms][DEBUG] targetPkg: running [2025-09-08 02:03:12][354601551126771][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-08 02:03:12][354601551126771][266 ms][DEBUG] START check_boot_completed [2025-09-08 02:03:12][354601551126771][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 02:03:12][354601551126771][312 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 02:03:12][354601551126771][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 02:03:12][354601551126771][359 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 02:03:12][354601551126771][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 02:03:12][354601551126771][359 ms][DEBUG] rawBody.length=1160 [2025-09-08 02:03:12][354601551126771][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601551126771\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9403\"}'\'' -e'"" [2025-09-08 02:03:12][354601551126771][359 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 02:03:12][354601551126771][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601551126771\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9403\"}'\'' -e'"" [2025-09-08 02:03:17][354601551126771][5311 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26f29226-671e-4835-a856-33f974076db9","id":"QR_26f29226-671e-4835-a856-33f974076db9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 02:03:17][354601551126771][5467 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-08 02:03:17][354601551126771][5467 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-08 02:03:17][354601551126771][5467 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 02:21:04][357799152211468][1 ms][INFO] === Request start === [2025-09-08 02:21:04][357799152211468][1 ms][DEBUG] START check_scloud [2025-09-08 02:21:04][357799152211468][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 02:21:04][357799152211468][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 4124 5020 25061788 166352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 02:21:04][357799152211468][298 ms][DEBUG] targetPkg: running [2025-09-08 02:21:04][357799152211468][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-08 02:21:04][357799152211468][298 ms][DEBUG] START check_boot_completed [2025-09-08 02:21:04][357799152211468][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 02:21:04][357799152211468][329 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 02:21:04][357799152211468][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 02:21:04][357799152211468][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 02:21:04][357799152211468][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 02:21:04][357799152211468][376 ms][DEBUG] rawBody.length=1160 [2025-09-08 02:21:04][357799152211468][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799152211468\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4569\"}'\'' -e'"" [2025-09-08 02:21:04][357799152211468][376 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 02:21:04][357799152211468][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799152211468\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4569\"}'\'' -e'"" [2025-09-08 02:21:09][357799152211468][4578 ms][DEBUG] proc_open done in 4202 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 02:21:09][357799152211468][4578 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-08 02:21:09][357799152211468][4578 ms][WARN] Detected error: Process with pid 4124 either refused to load frida-agent, or terminated during injectionProcess with pid 4124 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 02:21:09][357799152211468][4578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 02:21:09][357799152211468][4843 ms][DEBUG] SU: done in 265 ms; outsystem 5440 5020 12673204 188212 ep_poll 0 S system_server\n [2025-09-08 02:21:09][357799152211468][4843 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 02:21:09][357799152211468][4984 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 02:21:09][357799152211468][4984 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 02:21:09][357799152211468][4984 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 02:21:09][357799152211468][5156 ms][DEBUG] SU: done in 172 ms; out [2025-09-08 02:21:09][357799152211468][5156 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 02:21:09][357799152211468][5390 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 02:21:11][357799152211468][7405 ms][DEBUG] START check_boot_completed [2025-09-08 02:21:11][357799152211468][7405 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 02:21:11][357799152211468][7452 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 02:21:11][357799152211468][7452 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 02:21:11][357799152211468][7499 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 02:21:11][357799152211468][7499 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 02:21:14][357799152211468][10514 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 02:21:14][357799152211468][10514 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799152211468\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4569\"}'\'' -e'"" [2025-09-08 02:21:20][357799152211468][16262 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a426bd4e-ac30-4753-91f1-8b74343a5cc8","id":"QR_a426bd4e-ac30-4753-91f1-8b74343a5cc8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 02:21:20][357799152211468][16419 ms][DEBUG] proc_open done in 5905 ms; code=255; res.len=3343 [2025-09-08 02:21:20][357799152211468][16419 ms][DEBUG] END runCmdUntilRes#2 in 5905 ms [2025-09-08 02:21:20][357799152211468][16419 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 02:21:24][357799152211468][0 ms][INFO] === Request start === [2025-09-08 02:21:24][357799152211468][1 ms][DEBUG] START check_scloud [2025-09-08 02:21:24][357799152211468][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 02:21:24][357799152211468][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 9317 5020 23795232 125408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 02:21:24][357799152211468][263 ms][DEBUG] targetPkg: running [2025-09-08 02:21:24][357799152211468][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-08 02:21:24][357799152211468][263 ms][DEBUG] START check_boot_completed [2025-09-08 02:21:24][357799152211468][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 02:21:24][357799152211468][310 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 02:21:24][357799152211468][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 02:21:24][357799152211468][358 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 02:21:24][357799152211468][358 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 02:21:24][357799152211468][358 ms][DEBUG] rawBody.length=1150 [2025-09-08 02:21:24][357799152211468][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799152211468\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6182\"}'\'' -e'"" [2025-09-08 02:21:24][357799152211468][358 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 02:21:24][357799152211468][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799152211468\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6182\"}'\'' -e'"" [2025-09-08 02:21:28][357799152211468][4184 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ab4dcbe-5253-4235-8811-94b7910709c1","id":"QR_7ab4dcbe-5253-4235-8811-94b7910709c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 02:21:28][357799152211468][4340 ms][DEBUG] proc_open done in 3982 ms; code=255; res.len=3343 [2025-09-08 02:21:28][357799152211468][4340 ms][DEBUG] END runCmdUntilRes#1 in 3982 ms [2025-09-08 02:21:28][357799152211468][4340 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 02:43:03][357962505654996][1 ms][INFO] === Request start === [2025-09-08 02:43:03][357962505654996][1 ms][DEBUG] START check_scloud [2025-09-08 02:43:03][357962505654996][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 02:43:03][357962505654996][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 9317 5020 23864604 138996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 02:43:03][357962505654996][311 ms][DEBUG] targetPkg: running [2025-09-08 02:43:03][357962505654996][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 02:43:03][357962505654996][311 ms][DEBUG] START check_boot_completed [2025-09-08 02:43:03][357962505654996][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 02:43:03][357962505654996][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 02:43:03][357962505654996][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 02:43:03][357962505654996][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 02:43:03][357962505654996][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 02:43:03][357962505654996][390 ms][DEBUG] rawBody.length=1150 [2025-09-08 02:43:03][357962505654996][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505654996\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7667\"}'\'' -e'"" [2025-09-08 02:43:03][357962505654996][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 02:43:03][357962505654996][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505654996\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7667\"}'\'' -e'"" [2025-09-08 02:43:09][357962505654996][5654 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58917eff-ec93-40a6-9c95-39ca8c5ab4c8","id":"QR_58917eff-ec93-40a6-9c95-39ca8c5ab4c8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 02:43:09][357962505654996][5810 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-08 02:43:09][357962505654996][5810 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-08 02:43:09][357962505654996][5810 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 02:43:11][357962505654996][0 ms][INFO] === Request start === [2025-09-08 02:43:11][357962505654996][1 ms][DEBUG] START check_scloud [2025-09-08 02:43:11][357962505654996][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 02:43:11][357962505654996][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 9317 5020 24055408 149752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 02:43:11][357962505654996][267 ms][DEBUG] targetPkg: running [2025-09-08 02:43:11][357962505654996][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-08 02:43:11][357962505654996][267 ms][DEBUG] START check_boot_completed [2025-09-08 02:43:11][357962505654996][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 02:43:11][357962505654996][314 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 02:43:11][357962505654996][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 02:43:12][357962505654996][360 ms][DEBUG] SU: done in 46 ms; out [2025-09-08 02:43:12][357962505654996][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 02:43:12][357962505654996][360 ms][DEBUG] rawBody.length=1160 [2025-09-08 02:43:12][357962505654996][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505654996\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7752\"}'\'' -e'"" [2025-09-08 02:43:12][357962505654996][360 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 02:43:12][357962505654996][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505654996\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7752\"}'\'' -e'"" [2025-09-08 02:43:17][357962505654996][5516 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_922dfd96-4ae5-45b6-9d8d-ddbeec314e35","id":"QR_922dfd96-4ae5-45b6-9d8d-ddbeec314e35","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 02:43:17][357962505654996][5672 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 02:43:17][357962505654996][5672 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 02:43:17][357962505654996][5672 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 03:09:05][350274355848026][1 ms][INFO] === Request start === [2025-09-08 03:09:05][350274355848026][1 ms][DEBUG] START check_scloud [2025-09-08 03:09:05][350274355848026][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 03:09:05][350274355848026][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 9317 5020 24190628 136108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 03:09:05][350274355848026][297 ms][DEBUG] targetPkg: running [2025-09-08 03:09:05][350274355848026][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-08 03:09:05][350274355848026][297 ms][DEBUG] START check_boot_completed [2025-09-08 03:09:05][350274355848026][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 03:09:05][350274355848026][327 ms][DEBUG] ADB: done in 30 ms; out [2025-09-08 03:09:05][350274355848026][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 03:09:05][350274355848026][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 03:09:05][350274355848026][374 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-08 03:09:05][350274355848026][374 ms][DEBUG] rawBody.length=1160 [2025-09-08 03:09:05][350274355848026][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274355848026\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7865\"}'\'' -e'"" [2025-09-08 03:09:05][350274355848026][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 03:09:05][350274355848026][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274355848026\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7865\"}'\'' -e'"" [2025-09-08 03:09:11][350274355848026][6872 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0eca3dd1-a178-43f0-b3ac-f40c3ffe57f2","id":"QR_0eca3dd1-a178-43f0-b3ac-f40c3ffe57f2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 03:09:12][350274355848026][7028 ms][DEBUG] proc_open done in 6654 ms; code=255; res.len=3343 [2025-09-08 03:09:12][350274355848026][7028 ms][DEBUG] END runCmdUntilRes#1 in 6654 ms [2025-09-08 03:09:12][350274355848026][7028 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 03:09:15][350274355848026][0 ms][INFO] === Request start === [2025-09-08 03:09:15][350274355848026][1 ms][DEBUG] START check_scloud [2025-09-08 03:09:15][350274355848026][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 03:09:15][350274355848026][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 9317 5020 24354808 142104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 03:09:15][350274355848026][313 ms][DEBUG] targetPkg: running [2025-09-08 03:09:15][350274355848026][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 03:09:15][350274355848026][313 ms][DEBUG] START check_boot_completed [2025-09-08 03:09:15][350274355848026][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 03:09:15][350274355848026][359 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 03:09:15][350274355848026][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 03:09:16][350274355848026][421 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 03:09:16][350274355848026][422 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 03:09:16][350274355848026][422 ms][DEBUG] rawBody.length=1150 [2025-09-08 03:09:16][350274355848026][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274355848026\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9621\"}'\'' -e'"" [2025-09-08 03:09:16][350274355848026][422 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 03:09:16][350274355848026][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274355848026\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9621\"}'\'' -e'"" [2025-09-08 03:09:20][350274355848026][5155 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b3669dd-c01c-4bb0-a497-c86e8d0a68d8","id":"QR_3b3669dd-c01c-4bb0-a497-c86e8d0a68d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 03:09:20][350274355848026][5311 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-08 03:09:20][350274355848026][5311 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-08 03:09:20][350274355848026][5311 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 03:26:03][353561333186660][1 ms][INFO] === Request start === [2025-09-08 03:26:03][353561333186660][1 ms][DEBUG] START check_scloud [2025-09-08 03:26:03][353561333186660][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 03:26:03][353561333186660][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 9317 5020 24432748 136852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 03:26:03][353561333186660][256 ms][DEBUG] targetPkg: running [2025-09-08 03:26:03][353561333186660][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-08 03:26:03][353561333186660][256 ms][DEBUG] START check_boot_completed [2025-09-08 03:26:03][353561333186660][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 03:26:03][353561333186660][288 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 03:26:03][353561333186660][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 03:26:03][353561333186660][335 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 03:26:03][353561333186660][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 03:26:03][353561333186660][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 03:26:03][353561333186660][475 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8118\nsuccessfulTxPacketsPerSecond: 0.1336086481234058\nretriedTxPackets: 1885\nretriedTxPacketsPerSecond: 0.04048746912830479\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7716\nsuccessfulRxPacketsPerSecond: 0.14170614194906678\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 03:26:03][353561333186660][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 03:26:05][353561333186660][1834 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.930/302.930/302.930/0.000 ms\n [2025-09-08 03:26:05][353561333186660][1834 ms][DEBUG] check_internet: online [2025-09-08 03:26:05][353561333186660][1835 ms][DEBUG] rawBody.length=1150 [2025-09-08 03:26:05][353561333186660][1835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353561333186660\",\"model\":\"SM-G996N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5248\"}'\'' -e'"" [2025-09-08 03:26:05][353561333186660][1835 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 03:26:05][353561333186660][1835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353561333186660\",\"model\":\"SM-G996N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5248\"}'\'' -e'"" [2025-09-08 03:26:09][353561333186660][6036 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd860468-7686-421f-b988-ac0e12df1603","id":"QR_dd860468-7686-421f-b988-ac0e12df1603","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 03:26:09][353561333186660][6193 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-09-08 03:26:09][353561333186660][6193 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-09-08 03:26:09][353561333186660][6193 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 03:26:11][353561333186660][0 ms][INFO] === Request start === [2025-09-08 03:26:11][353561333186660][1 ms][DEBUG] START check_scloud [2025-09-08 03:26:11][353561333186660][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 03:26:12][353561333186660][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 9317 5020 24611200 137960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 03:26:12][353561333186660][291 ms][DEBUG] targetPkg: running [2025-09-08 03:26:12][353561333186660][291 ms][DEBUG] END check_scloud in 291 ms [2025-09-08 03:26:12][353561333186660][291 ms][DEBUG] START check_boot_completed [2025-09-08 03:26:12][353561333186660][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 03:26:12][353561333186660][338 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 03:26:12][353561333186660][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 03:26:12][353561333186660][400 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 03:26:12][353561333186660][400 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 03:26:12][353561333186660][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 03:26:12][353561333186660][525 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8118\nsuccessfulTxPacketsPerSecond: 0.1336086481234058\nretriedTxPackets: 1885\nretriedTxPacketsPerSecond: 0.04048746912830479\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7716\nsuccessfulRxPacketsPerSecond: 0.14170614194906678\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 03:26:12][353561333186660][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 03:26:12][353561333186660][931 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.218/301.218/301.218/0.000 ms\n [2025-09-08 03:26:12][353561333186660][932 ms][DEBUG] check_internet: online [2025-09-08 03:26:12][353561333186660][932 ms][DEBUG] rawBody.length=1160 [2025-09-08 03:26:12][353561333186660][932 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353561333186660\",\"model\":\"SM-G996N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2962\"}'\'' -e'"" [2025-09-08 03:26:12][353561333186660][932 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 03:26:12][353561333186660][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353561333186660\",\"model\":\"SM-G996N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2962\"}'\'' -e'"" [2025-09-08 03:26:18][353561333186660][6289 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_82e6f449-196b-4872-80fe-448503bdf3af","id":"QR_82e6f449-196b-4872-80fe-448503bdf3af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 03:26:18][353561333186660][6446 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-08 03:26:18][353561333186660][6446 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-08 03:26:18][353561333186660][6446 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 03:45:03][351868490002933][1 ms][INFO] === Request start === [2025-09-08 03:45:03][351868490002933][1 ms][DEBUG] START check_scloud [2025-09-08 03:45:03][351868490002933][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 03:45:04][351868490002933][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 9317 5020 24705524 131764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 03:45:04][351868490002933][311 ms][DEBUG] targetPkg: running [2025-09-08 03:45:04][351868490002933][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 03:45:04][351868490002933][311 ms][DEBUG] START check_boot_completed [2025-09-08 03:45:04][351868490002933][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 03:45:04][351868490002933][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 03:45:04][351868490002933][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 03:45:04][351868490002933][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 03:45:04][351868490002933][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 03:45:04][351868490002933][389 ms][DEBUG] rawBody.length=1150 [2025-09-08 03:45:04][351868490002933][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351868490002933\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7309\"}'\'' -e'"" [2025-09-08 03:45:04][351868490002933][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 03:45:04][351868490002933][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351868490002933\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7309\"}'\'' -e'"" [2025-09-08 03:45:09][351868490002933][5622 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37b41b7c-7df9-4c0b-a681-3c2d9e6cea2d","id":"QR_37b41b7c-7df9-4c0b-a681-3c2d9e6cea2d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 03:45:09][351868490002933][5779 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-08 03:45:09][351868490002933][5779 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-08 03:45:09][351868490002933][5779 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 03:45:11][351868490002933][0 ms][INFO] === Request start === [2025-09-08 03:45:11][351868490002933][1 ms][DEBUG] START check_scloud [2025-09-08 03:45:11][351868490002933][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 03:45:12][351868490002933][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 9317 5020 24896328 142676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 03:45:12][351868490002933][306 ms][DEBUG] targetPkg: running [2025-09-08 03:45:12][351868490002933][306 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 03:45:12][351868490002933][306 ms][DEBUG] START check_boot_completed [2025-09-08 03:45:12][351868490002933][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 03:45:12][351868490002933][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 03:45:12][351868490002933][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 03:45:12][351868490002933][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 03:45:12][351868490002933][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 03:45:12][351868490002933][400 ms][DEBUG] rawBody.length=1160 [2025-09-08 03:45:12][351868490002933][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351868490002933\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5369\"}'\'' -e'"" [2025-09-08 03:45:12][351868490002933][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 03:45:12][351868490002933][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351868490002933\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5369\"}'\'' -e'"" [2025-09-08 03:45:17][351868490002933][5570 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77d7ba7a-f3c7-4d33-a689-2b694442d604","id":"QR_77d7ba7a-f3c7-4d33-a689-2b694442d604","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 03:45:17][351868490002933][5727 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-08 03:45:17][351868490002933][5727 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-09-08 03:45:17][351868490002933][5727 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 03:50:03][358403090449319][1 ms][INFO] === Request start === [2025-09-08 03:50:03][358403090449319][1 ms][DEBUG] START check_scloud [2025-09-08 03:50:03][358403090449319][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 03:50:04][358403090449319][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 9317 5020 24997896 142644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 03:50:04][358403090449319][318 ms][DEBUG] targetPkg: running [2025-09-08 03:50:04][358403090449319][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 03:50:04][358403090449319][318 ms][DEBUG] START check_boot_completed [2025-09-08 03:50:04][358403090449319][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 03:50:04][358403090449319][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 03:50:04][358403090449319][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 03:50:04][358403090449319][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 03:50:04][358403090449319][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 03:50:04][358403090449319][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 03:50:04][358403090449319][505 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8385\nsuccessfulTxPacketsPerSecond: 0.0017333122794886897\nretriedTxPackets: 1970\nretriedTxPacketsPerSecond: 4.952320798539113E-4\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7959\nsuccessfulRxPacketsPerSecond: 0.0015809331779951784\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 03:50:04][358403090449319][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 03:50:05][358403090449319][1927 ms][DEBUG] SU: done in 1422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.488/301.488/301.488/0.000 ms\n [2025-09-08 03:50:05][358403090449319][1927 ms][DEBUG] check_internet: online [2025-09-08 03:50:05][358403090449319][1927 ms][DEBUG] rawBody.length=1150 [2025-09-08 03:50:05][358403090449319][1927 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358403090449319\",\"model\":\"SM-N960N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1444\"}'\'' -e'"" [2025-09-08 03:50:05][358403090449319][1927 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 03:50:05][358403090449319][1927 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358403090449319\",\"model\":\"SM-N960N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1444\"}'\'' -e'"" [2025-09-08 03:50:10][358403090449319][6098 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c63adf47-00d4-4374-a7cc-f43c85635943","id":"QR_c63adf47-00d4-4374-a7cc-f43c85635943","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 03:50:10][358403090449319][6254 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-09-08 03:50:10][358403090449319][6254 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-09-08 03:50:10][358403090449319][6254 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 03:50:12][358403090449319][0 ms][INFO] === Request start === [2025-09-08 03:50:12][358403090449319][1 ms][DEBUG] START check_scloud [2025-09-08 03:50:12][358403090449319][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 03:50:12][358403090449319][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 9317 5020 25148564 149764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 03:50:12][358403090449319][317 ms][DEBUG] targetPkg: running [2025-09-08 03:50:12][358403090449319][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 03:50:12][358403090449319][317 ms][DEBUG] START check_boot_completed [2025-09-08 03:50:12][358403090449319][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 03:50:12][358403090449319][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 03:50:12][358403090449319][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 03:50:12][358403090449319][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 03:50:12][358403090449319][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 03:50:13][358403090449319][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 03:50:13][358403090449319][582 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8385\nsuccessfulTxPacketsPerSecond: 0.0017333122794886897\nretriedTxPackets: 1970\nretriedTxPacketsPerSecond: 4.952320798539113E-4\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7959\nsuccessfulRxPacketsPerSecond: 0.0015809331779951784\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 03:50:13][358403090449319][583 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 03:50:13][358403090449319][1035 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.290/305.290/305.290/0.000 ms\n [2025-09-08 03:50:13][358403090449319][1035 ms][DEBUG] check_internet: online [2025-09-08 03:50:13][358403090449319][1035 ms][DEBUG] rawBody.length=1160 [2025-09-08 03:50:13][358403090449319][1035 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358403090449319\",\"model\":\"SM-N960N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7568\"}'\'' -e'"" [2025-09-08 03:50:13][358403090449319][1035 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 03:50:13][358403090449319][1035 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358403090449319\",\"model\":\"SM-N960N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7568\"}'\'' -e'"" [2025-09-08 03:50:18][358403090449319][5472 ms][DEBUG] proc_open done in 4437 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 03:50:18][358403090449319][5472 ms][DEBUG] END runCmdUntilRes#1 in 4437 ms [2025-09-08 03:50:18][358403090449319][5472 ms][WARN] Detected error: Process with pid 9317 either refused to load frida-agent, or terminated during injectionProcess with pid 9317 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 03:50:18][358403090449319][5472 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 03:50:18][358403090449319][5737 ms][DEBUG] SU: done in 265 ms; outsystem 5440 5020 12747332 183088 ep_poll 0 S system_server\n [2025-09-08 03:50:18][358403090449319][5738 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 03:50:18][358403090449319][5878 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 03:50:18][358403090449319][5878 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 03:50:18][358403090449319][5878 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 03:50:18][358403090449319][6003 ms][DEBUG] SU: done in 126 ms; out [2025-09-08 03:50:18][358403090449319][6004 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 03:50:18][358403090449319][6191 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 03:50:20][358403090449319][8205 ms][DEBUG] START check_boot_completed [2025-09-08 03:50:20][358403090449319][8205 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 03:50:20][358403090449319][8252 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 03:50:20][358403090449319][8252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 03:50:20][358403090449319][8300 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 03:50:20][358403090449319][8300 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 03:50:23][358403090449319][11314 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 03:50:23][358403090449319][11314 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358403090449319\",\"model\":\"SM-N960N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7568\"}'\'' -e'"" [2025-09-08 03:50:28][358403090449319][16313 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8393240f-27ab-457a-b5b5-9ffcfda57881","id":"QR_8393240f-27ab-457a-b5b5-9ffcfda57881","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 03:50:29][358403090449319][16469 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3343 [2025-09-08 03:50:29][358403090449319][16469 ms][DEBUG] END runCmdUntilRes#2 in 5155 ms [2025-09-08 03:50:29][358403090449319][16469 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 03:58:04][351690514757296][1 ms][INFO] === Request start === [2025-09-08 03:58:04][351690514757296][1 ms][DEBUG] START check_scloud [2025-09-08 03:58:04][351690514757296][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 03:58:04][351690514757296][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 14279 5020 23759032 127348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 03:58:04][351690514757296][253 ms][DEBUG] targetPkg: running [2025-09-08 03:58:04][351690514757296][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-08 03:58:04][351690514757296][254 ms][DEBUG] START check_boot_completed [2025-09-08 03:58:04][351690514757296][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 03:58:04][351690514757296][285 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 03:58:04][351690514757296][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 03:58:04][351690514757296][331 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 03:58:04][351690514757296][331 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 03:58:04][351690514757296][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 03:58:05][351690514757296][457 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8562\nsuccessfulTxPacketsPerSecond: 0.03428461717796459\nretriedTxPackets: 2018\nretriedTxPacketsPerSecond: 0.017142308588982295\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8116\nsuccessfulRxPacketsPerSecond: 0.030856155460168132\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 03:58:05][351690514757296][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 03:58:06][351690514757296][1847 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.630/300.630/300.630/0.000 ms\n [2025-09-08 03:58:06][351690514757296][1847 ms][DEBUG] check_internet: online [2025-09-08 03:58:06][351690514757296][1847 ms][DEBUG] rawBody.length=1160 [2025-09-08 03:58:06][351690514757296][1847 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351690514757296\",\"model\":\"SM-A536W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8082\"}'\'' -e'"" [2025-09-08 03:58:06][351690514757296][1847 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 03:58:06][351690514757296][1847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351690514757296\",\"model\":\"SM-A536W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8082\"}'\'' -e'"" [2025-09-08 03:58:11][351690514757296][6986 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_86a38ac9-f9f6-478b-83c7-552906ca4a19","id":"QR_86a38ac9-f9f6-478b-83c7-552906ca4a19","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 03:58:11][351690514757296][7142 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 03:58:11][351690514757296][7142 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 03:58:11][351690514757296][7142 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 03:58:15][351690514757296][1 ms][INFO] === Request start === [2025-09-08 03:58:15][351690514757296][1 ms][DEBUG] START check_scloud [2025-09-08 03:58:15][351690514757296][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 03:58:15][351690514757296][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 14279 5020 23933196 137900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 03:58:15][351690514757296][307 ms][DEBUG] targetPkg: running [2025-09-08 03:58:15][351690514757296][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 03:58:15][351690514757296][307 ms][DEBUG] START check_boot_completed [2025-09-08 03:58:15][351690514757296][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 03:58:15][351690514757296][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 03:58:15][351690514757296][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 03:58:15][351690514757296][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 03:58:15][351690514757296][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 03:58:15][351690514757296][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 03:58:15][351690514757296][510 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8562\nsuccessfulTxPacketsPerSecond: 0.03428461717796459\nretriedTxPackets: 2018\nretriedTxPacketsPerSecond: 0.017142308588982295\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8116\nsuccessfulRxPacketsPerSecond: 0.030856155460168132\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 03:58:15][351690514757296][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 03:58:16][351690514757296][931 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=317 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 317.771/317.771/317.771/0.000 ms\n [2025-09-08 03:58:16][351690514757296][931 ms][DEBUG] check_internet: online [2025-09-08 03:58:16][351690514757296][931 ms][DEBUG] rawBody.length=1150 [2025-09-08 03:58:16][351690514757296][932 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351690514757296\",\"model\":\"SM-A536W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4446\"}'\'' -e'"" [2025-09-08 03:58:16][351690514757296][932 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 03:58:16][351690514757296][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351690514757296\",\"model\":\"SM-A536W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4446\"}'\'' -e'"" [2025-09-08 03:58:19][351690514757296][4587 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_875a1be7-700a-4742-800d-057b8ff93b76","id":"QR_875a1be7-700a-4742-800d-057b8ff93b76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 03:58:20][351690514757296][4743 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-08 03:58:20][351690514757296][4743 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-09-08 03:58:20][351690514757296][4743 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 04:32:03][355157582190186][1 ms][INFO] === Request start === [2025-09-08 04:32:03][355157582190186][1 ms][DEBUG] START check_scloud [2025-09-08 04:32:03][355157582190186][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 04:32:03][355157582190186][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 14279 5020 24071324 148488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 04:32:03][355157582190186][311 ms][DEBUG] targetPkg: running [2025-09-08 04:32:03][355157582190186][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 04:32:03][355157582190186][311 ms][DEBUG] START check_boot_completed [2025-09-08 04:32:03][355157582190186][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 04:32:03][355157582190186][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 04:32:03][355157582190186][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 04:32:04][355157582190186][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 04:32:04][355157582190186][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 04:32:04][355157582190186][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 04:32:04][355157582190186][499 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8745\nsuccessfulTxPacketsPerSecond: 0.1370372545564887\nretriedTxPackets: 2091\nretriedTxPacketsPerSecond: 0.048941876627317395\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8287\nsuccessfulRxPacketsPerSecond: 0.13051167100617972\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 04:32:04][355157582190186][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 04:32:05][355157582190186][1983 ms][DEBUG] SU: done in 1484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=406 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 406.015/406.015/406.015/0.000 ms\n [2025-09-08 04:32:05][355157582190186][1983 ms][DEBUG] check_internet: online [2025-09-08 04:32:05][355157582190186][1983 ms][DEBUG] rawBody.length=1150 [2025-09-08 04:32:05][355157582190186][1983 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355157582190186\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9302\"}'\'' -e'"" [2025-09-08 04:32:05][355157582190186][1983 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 04:32:05][355157582190186][1984 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355157582190186\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9302\"}'\'' -e'"" [2025-09-08 04:32:09][355157582190186][5560 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5fbbd65-f298-43f0-b61e-b5e78ace7fe5","id":"QR_c5fbbd65-f298-43f0-b61e-b5e78ace7fe5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 04:32:09][355157582190186][5716 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-08 04:32:09][355157582190186][5716 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-08 04:32:09][355157582190186][5716 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 04:32:11][355157582190186][0 ms][INFO] === Request start === [2025-09-08 04:32:11][355157582190186][1 ms][DEBUG] START check_scloud [2025-09-08 04:32:11][355157582190186][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 04:32:11][355157582190186][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 14279 5020 24237232 160132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 04:32:11][355157582190186][311 ms][DEBUG] targetPkg: running [2025-09-08 04:32:11][355157582190186][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 04:32:11][355157582190186][311 ms][DEBUG] START check_boot_completed [2025-09-08 04:32:11][355157582190186][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 04:32:11][355157582190186][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 04:32:11][355157582190186][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 04:32:12][355157582190186][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 04:32:12][355157582190186][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 04:32:12][355157582190186][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 04:32:12][355157582190186][514 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8745\nsuccessfulTxPacketsPerSecond: 0.1370372545564887\nretriedTxPackets: 2091\nretriedTxPacketsPerSecond: 0.048941876627317395\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8287\nsuccessfulRxPacketsPerSecond: 0.13051167100617972\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 04:32:12][355157582190186][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 04:32:12][355157582190186][936 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=295 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 295.394/295.394/295.394/0.000 ms\n [2025-09-08 04:32:12][355157582190186][936 ms][DEBUG] check_internet: online [2025-09-08 04:32:12][355157582190186][936 ms][DEBUG] rawBody.length=1160 [2025-09-08 04:32:12][355157582190186][936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355157582190186\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5821\"}'\'' -e'"" [2025-09-08 04:32:12][355157582190186][936 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 04:32:12][355157582190186][936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355157582190186\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5821\"}'\'' -e'"" [2025-09-08 04:32:17][355157582190186][6075 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_76ea7fe5-8602-4389-820b-2fcadb3803ad","id":"QR_76ea7fe5-8602-4389-820b-2fcadb3803ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 04:32:17][355157582190186][6231 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 04:32:17][355157582190186][6231 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 04:32:17][355157582190186][6231 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 04:32:23][353335111612449][0 ms][INFO] === Request start === [2025-09-08 04:32:23][353335111612449][1 ms][DEBUG] START check_scloud [2025-09-08 04:32:23][353335111612449][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 04:32:23][353335111612449][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 14279 5020 24385976 152740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 04:32:23][353335111612449][266 ms][DEBUG] targetPkg: running [2025-09-08 04:32:23][353335111612449][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-08 04:32:23][353335111612449][266 ms][DEBUG] START check_boot_completed [2025-09-08 04:32:23][353335111612449][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 04:32:23][353335111612449][297 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 04:32:23][353335111612449][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 04:32:23][353335111612449][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 04:32:23][353335111612449][344 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 04:32:23][353335111612449][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 04:32:23][353335111612449][454 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8745\nsuccessfulTxPacketsPerSecond: 0.1370372545564887\nretriedTxPackets: 2091\nretriedTxPacketsPerSecond: 0.048941876627317395\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8287\nsuccessfulRxPacketsPerSecond: 0.13051167100617972\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 04:32:23][353335111612449][455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 04:32:24][353335111612449][828 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=274 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 274.299/274.299/274.299/0.000 ms\n [2025-09-08 04:32:24][353335111612449][828 ms][DEBUG] check_internet: online [2025-09-08 04:32:24][353335111612449][828 ms][DEBUG] rawBody.length=1160 [2025-09-08 04:32:24][353335111612449][829 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335111612449\",\"model\":\"SM-A505U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1298\"}'\'' -e'"" [2025-09-08 04:32:24][353335111612449][829 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 04:32:24][353335111612449][829 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335111612449\",\"model\":\"SM-A505U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1298\"}'\'' -e'"" [2025-09-08 04:32:28][353335111612449][5484 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42a3f342-4599-4e5d-9213-2042f3b6d88c","id":"QR_42a3f342-4599-4e5d-9213-2042f3b6d88c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 04:32:28][353335111612449][5640 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-08 04:32:28][353335111612449][5640 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-08 04:32:28][353335111612449][5640 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 04:32:32][353335111612449][0 ms][INFO] === Request start === [2025-09-08 04:32:32][353335111612449][1 ms][DEBUG] START check_scloud [2025-09-08 04:32:32][353335111612449][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 04:32:32][353335111612449][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 14279 5020 24546972 164624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 04:32:32][353335111612449][310 ms][DEBUG] targetPkg: running [2025-09-08 04:32:32][353335111612449][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 04:32:32][353335111612449][311 ms][DEBUG] START check_boot_completed [2025-09-08 04:32:32][353335111612449][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 04:32:32][353335111612449][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 04:32:32][353335111612449][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 04:32:32][353335111612449][406 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 04:32:32][353335111612449][406 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 04:32:32][353335111612449][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 04:32:32][353335111612449][545 ms][DEBUG] SU: done in 138 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8745\nsuccessfulTxPacketsPerSecond: 0.1370372545564887\nretriedTxPackets: 2091\nretriedTxPacketsPerSecond: 0.048941876627317395\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8287\nsuccessfulRxPacketsPerSecond: 0.13051167100617972\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 04:32:32][353335111612449][545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 04:32:33][353335111612449][966 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=323 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 323.209/323.209/323.209/0.000 ms\n [2025-09-08 04:32:33][353335111612449][967 ms][DEBUG] check_internet: online [2025-09-08 04:32:33][353335111612449][967 ms][DEBUG] rawBody.length=1150 [2025-09-08 04:32:33][353335111612449][967 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335111612449\",\"model\":\"SM-A505U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7447\"}'\'' -e'"" [2025-09-08 04:32:33][353335111612449][967 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 04:32:33][353335111612449][967 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335111612449\",\"model\":\"SM-A505U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7447\"}'\'' -e'"" [2025-09-08 04:32:37][353335111612449][5122 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33fcd5fc-e582-471c-a20e-180489361f8e","id":"QR_33fcd5fc-e582-471c-a20e-180489361f8e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 04:32:37][353335111612449][5278 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-09-08 04:32:37][353335111612449][5278 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-09-08 04:32:37][353335111612449][5278 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 04:46:03][358799693583903][1 ms][INFO] === Request start === [2025-09-08 04:46:03][358799693583903][1 ms][DEBUG] START check_scloud [2025-09-08 04:46:03][358799693583903][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 04:46:03][358799693583903][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 14279 5020 24661612 175280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 04:46:03][358799693583903][296 ms][DEBUG] targetPkg: running [2025-09-08 04:46:03][358799693583903][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-08 04:46:03][358799693583903][296 ms][DEBUG] START check_boot_completed [2025-09-08 04:46:03][358799693583903][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 04:46:03][358799693583903][326 ms][DEBUG] ADB: done in 29 ms; out [2025-09-08 04:46:03][358799693583903][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 04:46:03][358799693583903][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 04:46:03][358799693583903][373 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-08 04:46:03][358799693583903][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 04:46:04][358799693583903][498 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8869\nsuccessfulTxPacketsPerSecond: 0.019532699692555305\nretriedTxPackets: 2140\nretriedTxPacketsPerSecond: 0.019532699692555305\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8394\nsuccessfulRxPacketsPerSecond: 0.02343923963106637\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 04:46:04][358799693583903][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 04:46:05][358799693583903][1904 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=289 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 289.881/289.881/289.881/0.000 ms\n [2025-09-08 04:46:05][358799693583903][1904 ms][DEBUG] check_internet: online [2025-09-08 04:46:05][358799693583903][1904 ms][DEBUG] rawBody.length=1150 [2025-09-08 04:46:05][358799693583903][1904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799693583903\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3835\"}'\'' -e'"" [2025-09-08 04:46:05][358799693583903][1904 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 04:46:05][358799693583903][1904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799693583903\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3835\"}'\'' -e'"" [2025-09-08 04:46:09][358799693583903][5762 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_56622fef-5d03-408d-ba82-3c8cb5177ccf","id":"QR_56622fef-5d03-408d-ba82-3c8cb5177ccf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 04:46:09][358799693583903][5918 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-09-08 04:46:09][358799693583903][5918 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-09-08 04:46:09][358799693583903][5918 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 04:51:04][357651718901902][1 ms][INFO] === Request start === [2025-09-08 04:51:04][357651718901902][1 ms][DEBUG] START check_scloud [2025-09-08 04:51:04][357651718901902][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 04:51:05][357651718901902][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 14279 5020 24833820 185944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 04:51:05][357651718901902][313 ms][DEBUG] targetPkg: running [2025-09-08 04:51:05][357651718901902][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 04:51:05][357651718901902][313 ms][DEBUG] START check_boot_completed [2025-09-08 04:51:05][357651718901902][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 04:51:05][357651718901902][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 04:51:05][357651718901902][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 04:51:05][357651718901902][407 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 04:51:05][357651718901902][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 04:51:05][357651718901902][407 ms][DEBUG] rawBody.length=1160 [2025-09-08 04:51:05][357651718901902][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718901902\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5113\"}'\'' -e'"" [2025-09-08 04:51:05][357651718901902][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 04:51:05][357651718901902][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718901902\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5113\"}'\'' -e'"" [2025-09-08 04:51:11][357651718901902][6202 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2af3361-5387-4e4f-8c49-9ac001f767ec","id":"QR_b2af3361-5387-4e4f-8c49-9ac001f767ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 04:51:11][357651718901902][6358 ms][DEBUG] proc_open done in 5951 ms; code=255; res.len=3343 [2025-09-08 04:51:11][357651718901902][6358 ms][DEBUG] END runCmdUntilRes#1 in 5951 ms [2025-09-08 04:51:11][357651718901902][6358 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 04:51:14][357651718901902][0 ms][INFO] === Request start === [2025-09-08 04:51:14][357651718901902][1 ms][DEBUG] START check_scloud [2025-09-08 04:51:14][357651718901902][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 04:51:15][357651718901902][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 14279 5020 24996900 192496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 04:51:15][357651718901902][316 ms][DEBUG] targetPkg: running [2025-09-08 04:51:15][357651718901902][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 04:51:15][357651718901902][316 ms][DEBUG] START check_boot_completed [2025-09-08 04:51:15][357651718901902][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 04:51:15][357651718901902][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 04:51:15][357651718901902][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 04:51:15][357651718901902][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 04:51:15][357651718901902][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 04:51:15][357651718901902][394 ms][DEBUG] rawBody.length=1150 [2025-09-08 04:51:15][357651718901902][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718901902\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4073\"}'\'' -e'"" [2025-09-08 04:51:15][357651718901902][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 04:51:15][357651718901902][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718901902\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4073\"}'\'' -e'"" [2025-09-08 04:51:19][357651718901902][5158 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97335da8-ebe4-4b00-89f3-e80fb9b668f5","id":"QR_97335da8-ebe4-4b00-89f3-e80fb9b668f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 04:51:20][357651718901902][5314 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-09-08 04:51:20][357651718901902][5314 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-08 04:51:20][357651718901902][5314 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 05:06:03][353182207126573][1 ms][INFO] === Request start === [2025-09-08 05:06:03][353182207126573][1 ms][DEBUG] START check_scloud [2025-09-08 05:06:03][353182207126573][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 05:06:04][353182207126573][289 ms][DEBUG] SU: done in 287 ms; outu0_a118 14279 5020 25115804 190212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 05:06:04][353182207126573][289 ms][DEBUG] targetPkg: running [2025-09-08 05:06:04][353182207126573][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-08 05:06:04][353182207126573][289 ms][DEBUG] START check_boot_completed [2025-09-08 05:06:04][353182207126573][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:06:04][353182207126573][320 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 05:06:04][353182207126573][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:06:04][353182207126573][383 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 05:06:04][353182207126573][383 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 05:06:04][353182207126573][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 05:06:04][353182207126573][492 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 9305\nsuccessfulTxPacketsPerSecond: 0.5345090318746659\nretriedTxPackets: 2231\nretriedTxPacketsPerSecond: 0.06971856937495642\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8867\nsuccessfulRxPacketsPerSecond: 0.7270650806245456\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 05:06:04][353182207126573][492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 05:06:05][353182207126573][1851 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.708/303.708/303.708/0.000 ms\n [2025-09-08 05:06:05][353182207126573][1851 ms][DEBUG] check_internet: online [2025-09-08 05:06:05][353182207126573][1851 ms][DEBUG] rawBody.length=1150 [2025-09-08 05:06:05][353182207126573][1851 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182207126573\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6842\"}'\'' -e'"" [2025-09-08 05:06:05][353182207126573][1851 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 05:06:05][353182207126573][1851 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182207126573\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6842\"}'\'' -e'"" [2025-09-08 05:06:09][353182207126573][5616 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a08d937d-cb11-4974-a78e-7fd78bd4546d","id":"QR_a08d937d-cb11-4974-a78e-7fd78bd4546d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 05:06:09][353182207126573][5772 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-08 05:06:09][353182207126573][5772 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-09-08 05:06:09][353182207126573][5772 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 05:06:11][353182207126573][0 ms][INFO] === Request start === [2025-09-08 05:06:11][353182207126573][1 ms][DEBUG] START check_scloud [2025-09-08 05:06:11][353182207126573][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 05:06:12][353182207126573][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 14279 5020 25296368 166904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 05:06:12][353182207126573][263 ms][DEBUG] targetPkg: running [2025-09-08 05:06:12][353182207126573][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-08 05:06:12][353182207126573][263 ms][DEBUG] START check_boot_completed [2025-09-08 05:06:12][353182207126573][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:06:12][353182207126573][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 05:06:12][353182207126573][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:06:12][353182207126573][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 05:06:12][353182207126573][356 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 05:06:12][353182207126573][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 05:06:12][353182207126573][497 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 9305\nsuccessfulTxPacketsPerSecond: 0.5345090318746659\nretriedTxPackets: 2231\nretriedTxPacketsPerSecond: 0.06971856937495642\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8867\nsuccessfulRxPacketsPerSecond: 0.7270650806245456\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 05:06:12][353182207126573][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 05:06:12][353182207126573][856 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.037/257.037/257.037/0.000 ms\n [2025-09-08 05:06:12][353182207126573][856 ms][DEBUG] check_internet: online [2025-09-08 05:06:12][353182207126573][856 ms][DEBUG] rawBody.length=1160 [2025-09-08 05:06:12][353182207126573][857 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182207126573\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1208\"}'\'' -e'"" [2025-09-08 05:06:12][353182207126573][857 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 05:06:12][353182207126573][857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182207126573\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1208\"}'\'' -e'"" [2025-09-08 05:06:17][353182207126573][5168 ms][DEBUG] proc_open done in 4311 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 05:06:17][353182207126573][5168 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-09-08 05:06:17][353182207126573][5168 ms][WARN] Detected error: Process with pid 14279 either refused to load frida-agent, or terminated during injectionProcess with pid 14279 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 05:06:17][353182207126573][5168 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 05:06:17][353182207126573][5433 ms][DEBUG] SU: done in 265 ms; outsystem 5440 5020 12694608 186940 ep_poll 0 S system_server\n [2025-09-08 05:06:17][353182207126573][5433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 05:06:17][353182207126573][5574 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 05:06:17][353182207126573][5574 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 05:06:17][353182207126573][5574 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 05:06:17][353182207126573][5730 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 05:06:17][353182207126573][5730 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 05:06:17][353182207126573][5964 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 05:06:19][353182207126573][7979 ms][DEBUG] START check_boot_completed [2025-09-08 05:06:19][353182207126573][7980 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:06:19][353182207126573][8026 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 05:06:19][353182207126573][8026 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:06:19][353182207126573][8089 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 05:06:19][353182207126573][8089 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 05:06:22][353182207126573][11104 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 05:06:22][353182207126573][11104 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182207126573\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1208\"}'\'' -e'"" [2025-09-08 05:06:28][353182207126573][16259 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa6c8712-43fc-4fcd-ae8a-82f76dd4579a","id":"QR_aa6c8712-43fc-4fcd-ae8a-82f76dd4579a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 05:06:28][353182207126573][16415 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 05:06:28][353182207126573][16415 ms][DEBUG] END runCmdUntilRes#2 in 5311 ms [2025-09-08 05:06:28][353182207126573][16415 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 05:39:03][355326626165039][1 ms][INFO] === Request start === [2025-09-08 05:39:03][355326626165039][1 ms][DEBUG] START check_scloud [2025-09-08 05:39:03][355326626165039][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 05:39:04][355326626165039][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 18660 5020 23749304 127184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 05:39:04][355326626165039][255 ms][DEBUG] targetPkg: running [2025-09-08 05:39:04][355326626165039][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-08 05:39:04][355326626165039][255 ms][DEBUG] START check_boot_completed [2025-09-08 05:39:04][355326626165039][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:39:04][355326626165039][286 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 05:39:04][355326626165039][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:39:04][355326626165039][333 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 05:39:04][355326626165039][333 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 05:39:04][355326626165039][333 ms][DEBUG] rawBody.length=1150 [2025-09-08 05:39:04][355326626165039][333 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326626165039\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7561\"}'\'' -e'"" [2025-09-08 05:39:04][355326626165039][333 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 05:39:04][355326626165039][333 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326626165039\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7561\"}'\'' -e'"" [2025-09-08 05:39:09][355326626165039][5113 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2de856aa-b2b9-43f3-9c3e-8bb81d91dcc4","id":"QR_2de856aa-b2b9-43f3-9c3e-8bb81d91dcc4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 05:39:09][355326626165039][5269 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-08 05:39:09][355326626165039][5269 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-08 05:39:09][355326626165039][5269 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 05:39:11][355326626165039][0 ms][INFO] === Request start === [2025-09-08 05:39:11][355326626165039][1 ms][DEBUG] START check_scloud [2025-09-08 05:39:11][355326626165039][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 05:39:11][355326626165039][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 18660 5020 23894860 137916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 05:39:11][355326626165039][297 ms][DEBUG] targetPkg: running [2025-09-08 05:39:11][355326626165039][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-08 05:39:11][355326626165039][297 ms][DEBUG] START check_boot_completed [2025-09-08 05:39:11][355326626165039][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:39:11][355326626165039][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 05:39:11][355326626165039][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:39:11][355326626165039][406 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 05:39:11][355326626165039][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 05:39:11][355326626165039][406 ms][DEBUG] rawBody.length=1160 [2025-09-08 05:39:11][355326626165039][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326626165039\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5123\"}'\'' -e'"" [2025-09-08 05:39:11][355326626165039][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 05:39:11][355326626165039][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326626165039\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5123\"}'\'' -e'"" [2025-09-08 05:39:17][355326626165039][5905 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cca3db3d-663c-4efc-a7e6-424da0960b21","id":"QR_cca3db3d-663c-4efc-a7e6-424da0960b21","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 05:39:17][355326626165039][6061 ms][DEBUG] proc_open done in 5655 ms; code=255; res.len=3343 [2025-09-08 05:39:17][355326626165039][6061 ms][DEBUG] END runCmdUntilRes#1 in 5655 ms [2025-09-08 05:39:17][355326626165039][6061 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 05:45:03][352674520085412][1 ms][INFO] === Request start === [2025-09-08 05:45:03][352674520085412][1 ms][DEBUG] START check_scloud [2025-09-08 05:45:03][352674520085412][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 05:45:03][352674520085412][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 18660 5020 23999308 149868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 05:45:03][352674520085412][295 ms][DEBUG] targetPkg: running [2025-09-08 05:45:03][352674520085412][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-08 05:45:03][352674520085412][295 ms][DEBUG] START check_boot_completed [2025-09-08 05:45:03][352674520085412][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:45:03][352674520085412][326 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 05:45:03][352674520085412][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:45:03][352674520085412][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 05:45:03][352674520085412][374 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 05:45:03][352674520085412][374 ms][DEBUG] rawBody.length=1150 [2025-09-08 05:45:03][352674520085412][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520085412\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6459\"}'\'' -e'"" [2025-09-08 05:45:03][352674520085412][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 05:45:03][352674520085412][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520085412\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6459\"}'\'' -e'"" [2025-09-08 05:45:07][352674520085412][4841 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40e33153-65af-4727-b63b-49dcd3c10b47","id":"QR_40e33153-65af-4727-b63b-49dcd3c10b47","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 05:45:08][352674520085412][4997 ms][DEBUG] proc_open done in 4623 ms; code=255; res.len=3343 [2025-09-08 05:45:08][352674520085412][4997 ms][DEBUG] END runCmdUntilRes#1 in 4623 ms [2025-09-08 05:45:08][352674520085412][4997 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 05:45:10][352674520085412][0 ms][INFO] === Request start === [2025-09-08 05:45:10][352674520085412][1 ms][DEBUG] START check_scloud [2025-09-08 05:45:10][352674520085412][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 05:45:10][352674520085412][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 18660 5020 24123476 160504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 05:45:10][352674520085412][308 ms][DEBUG] targetPkg: running [2025-09-08 05:45:10][352674520085412][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 05:45:10][352674520085412][308 ms][DEBUG] START check_boot_completed [2025-09-08 05:45:10][352674520085412][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:45:10][352674520085412][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 05:45:10][352674520085412][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:45:10][352674520085412][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 05:45:10][352674520085412][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 05:45:10][352674520085412][418 ms][DEBUG] rawBody.length=1160 [2025-09-08 05:45:10][352674520085412][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520085412\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7572\"}'\'' -e'"" [2025-09-08 05:45:10][352674520085412][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 05:45:10][352674520085412][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520085412\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7572\"}'\'' -e'"" [2025-09-08 05:45:15][352674520085412][5494 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f286e79-dac8-4525-99f8-cb89ef54f531","id":"QR_4f286e79-dac8-4525-99f8-cb89ef54f531","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 05:45:15][352674520085412][5651 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-08 05:45:15][352674520085412][5651 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-08 05:45:15][352674520085412][5651 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 05:45:20][350040120820214][1 ms][INFO] === Request start === [2025-09-08 05:45:20][350040120820214][1 ms][DEBUG] START check_scloud [2025-09-08 05:45:20][350040120820214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 05:45:20][350040120820214][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 18660 5020 24257820 172232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 05:45:20][350040120820214][250 ms][DEBUG] targetPkg: running [2025-09-08 05:45:20][350040120820214][250 ms][DEBUG] END check_scloud in 249 ms [2025-09-08 05:45:20][350040120820214][250 ms][DEBUG] START check_boot_completed [2025-09-08 05:45:20][350040120820214][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:45:20][350040120820214][296 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 05:45:20][350040120820214][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:45:20][350040120820214][343 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 05:45:20][350040120820214][343 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 05:45:20][350040120820214][343 ms][DEBUG] rawBody.length=1150 [2025-09-08 05:45:20][350040120820214][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040120820214\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7505\"}'\'' -e'"" [2025-09-08 05:45:20][350040120820214][343 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 05:45:20][350040120820214][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040120820214\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7505\"}'\'' -e'"" [2025-09-08 05:45:23][350040120820214][3811 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48469e6a-b865-4f83-a314-71331f5bc839","id":"QR_48469e6a-b865-4f83-a314-71331f5bc839","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 05:45:24][350040120820214][3967 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=3343 [2025-09-08 05:45:24][350040120820214][3967 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-08 05:45:24][350040120820214][3967 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 05:45:26][350040120820214][1 ms][INFO] === Request start === [2025-09-08 05:45:26][350040120820214][1 ms][DEBUG] START check_scloud [2025-09-08 05:45:26][350040120820214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 05:45:26][350040120820214][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 18660 5020 24412544 182192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 05:45:26][350040120820214][275 ms][DEBUG] targetPkg: running [2025-09-08 05:45:26][350040120820214][276 ms][DEBUG] END check_scloud in 274 ms [2025-09-08 05:45:26][350040120820214][276 ms][DEBUG] START check_boot_completed [2025-09-08 05:45:26][350040120820214][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:45:26][350040120820214][322 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 05:45:26][350040120820214][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:45:26][350040120820214][385 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 05:45:26][350040120820214][385 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 05:45:26][350040120820214][385 ms][DEBUG] rawBody.length=1160 [2025-09-08 05:45:26][350040120820214][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040120820214\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8266\"}'\'' -e'"" [2025-09-08 05:45:26][350040120820214][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 05:45:26][350040120820214][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040120820214\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8266\"}'\'' -e'"" [2025-09-08 05:45:31][350040120820214][5274 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_638c9ddc-c0b5-4225-9fff-9da947cf2eb1","id":"QR_638c9ddc-c0b5-4225-9fff-9da947cf2eb1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 05:45:31][350040120820214][5430 ms][DEBUG] proc_open done in 5045 ms; code=255; res.len=3343 [2025-09-08 05:45:31][350040120820214][5430 ms][DEBUG] END runCmdUntilRes#1 in 5045 ms [2025-09-08 05:45:31][350040120820214][5430 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 05:48:03][358141431604560][1 ms][INFO] === Request start === [2025-09-08 05:48:03][358141431604560][1 ms][DEBUG] START check_scloud [2025-09-08 05:48:03][358141431604560][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 05:48:03][358141431604560][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 18660 5020 24502712 193396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 05:48:03][358141431604560][291 ms][DEBUG] targetPkg: running [2025-09-08 05:48:03][358141431604560][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-08 05:48:03][358141431604560][291 ms][DEBUG] START check_boot_completed [2025-09-08 05:48:03][358141431604560][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:48:03][358141431604560][322 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 05:48:03][358141431604560][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:48:03][358141431604560][369 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 05:48:03][358141431604560][369 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 05:48:03][358141431604560][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 05:48:03][358141431604560][479 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 9546\nsuccessfulTxPacketsPerSecond: 0.19910601399715278\nretriedTxPackets: 2330\nretriedTxPacketsPerSecond: 0.06968710489900347\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 9093\nsuccessfulRxPacketsPerSecond: 0.17255854546419908\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 05:48:03][358141431604560][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 05:48:05][358141431604560][1947 ms][DEBUG] SU: done in 1468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.711/298.711/298.711/0.000 ms\n [2025-09-08 05:48:05][358141431604560][1947 ms][DEBUG] check_internet: online [2025-09-08 05:48:05][358141431604560][1947 ms][DEBUG] rawBody.length=1150 [2025-09-08 05:48:05][358141431604560][1947 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141431604560\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3922\"}'\'' -e'"" [2025-09-08 05:48:05][358141431604560][1947 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 05:48:05][358141431604560][1947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141431604560\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3922\"}'\'' -e'"" [2025-09-08 05:48:09][358141431604560][5758 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9133d9d2-25a3-48eb-857d-ee0fed89e29a","id":"QR_9133d9d2-25a3-48eb-857d-ee0fed89e29a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 05:48:09][358141431604560][5915 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-09-08 05:48:09][358141431604560][5915 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-09-08 05:48:09][358141431604560][5915 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 05:48:11][358141431604560][1 ms][INFO] === Request start === [2025-09-08 05:48:11][358141431604560][1 ms][DEBUG] START check_scloud [2025-09-08 05:48:11][358141431604560][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 05:48:11][358141431604560][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 18660 5020 24676032 205144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 05:48:11][358141431604560][275 ms][DEBUG] targetPkg: running [2025-09-08 05:48:11][358141431604560][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-08 05:48:11][358141431604560][275 ms][DEBUG] START check_boot_completed [2025-09-08 05:48:11][358141431604560][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:48:11][358141431604560][321 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 05:48:11][358141431604560][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:48:11][358141431604560][369 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 05:48:11][358141431604560][369 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 05:48:11][358141431604560][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 05:48:12][358141431604560][478 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 9546\nsuccessfulTxPacketsPerSecond: 0.19910601399715278\nretriedTxPackets: 2330\nretriedTxPacketsPerSecond: 0.06968710489900347\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 9093\nsuccessfulRxPacketsPerSecond: 0.17255854546419908\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 05:48:12][358141431604560][478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 05:48:12][358141431604560][837 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=229 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 229.243/229.243/229.243/0.000 ms\n [2025-09-08 05:48:12][358141431604560][837 ms][DEBUG] check_internet: online [2025-09-08 05:48:12][358141431604560][837 ms][DEBUG] rawBody.length=1160 [2025-09-08 05:48:12][358141431604560][837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141431604560\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4130\"}'\'' -e'"" [2025-09-08 05:48:12][358141431604560][837 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 05:48:12][358141431604560][837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141431604560\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4130\"}'\'' -e'"" [2025-09-08 05:48:17][358141431604560][6304 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ef7abbd3-e7a8-47b6-bc4e-36df30ad9ef7","id":"QR_ef7abbd3-e7a8-47b6-bc4e-36df30ad9ef7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 05:48:18][358141431604560][6460 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-09-08 05:48:18][358141431604560][6460 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-09-08 05:48:18][358141431604560][6460 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 05:58:04][350072605882625][1 ms][INFO] === Request start === [2025-09-08 05:58:04][350072605882625][1 ms][DEBUG] START check_scloud [2025-09-08 05:58:04][350072605882625][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 05:58:04][350072605882625][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 18660 5020 24803124 216740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 05:58:04][350072605882625][308 ms][DEBUG] targetPkg: running [2025-09-08 05:58:04][350072605882625][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 05:58:04][350072605882625][308 ms][DEBUG] START check_boot_completed [2025-09-08 05:58:04][350072605882625][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:58:04][350072605882625][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 05:58:04][350072605882625][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:58:04][350072605882625][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 05:58:04][350072605882625][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 05:58:04][350072605882625][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 05:58:04][350072605882625][496 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 9792\nsuccessfulTxPacketsPerSecond: 0.013853965351232657\nretriedTxPackets: 2415\nretriedTxPacketsPerSecond: 0.013853965351232657\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 9301\nsuccessfulRxPacketsPerSecond: 0.013853965351232657\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 05:58:04][350072605882625][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 05:58:06][350072605882625][1902 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.740/299.740/299.740/0.000 ms\n [2025-09-08 05:58:06][350072605882625][1902 ms][DEBUG] check_internet: online [2025-09-08 05:58:06][350072605882625][1902 ms][DEBUG] rawBody.length=1160 [2025-09-08 05:58:06][350072605882625][1902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350072605882625\",\"model\":\"SM-F721W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6538\"}'\'' -e'"" [2025-09-08 05:58:06][350072605882625][1902 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 05:58:06][350072605882625][1902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350072605882625\",\"model\":\"SM-F721W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6538\"}'\'' -e'"" [2025-09-08 05:58:11][350072605882625][7369 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d2a193f-eb08-4b41-a48c-fec712f922e6","id":"QR_9d2a193f-eb08-4b41-a48c-fec712f922e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 05:58:11][350072605882625][7525 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-09-08 05:58:11][350072605882625][7525 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-09-08 05:58:11][350072605882625][7525 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 05:58:15][350072605882625][0 ms][INFO] === Request start === [2025-09-08 05:58:15][350072605882625][1 ms][DEBUG] START check_scloud [2025-09-08 05:58:15][350072605882625][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 05:58:15][350072605882625][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 18660 5020 25005708 228516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 05:58:15][350072605882625][259 ms][DEBUG] targetPkg: running [2025-09-08 05:58:15][350072605882625][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-08 05:58:15][350072605882625][259 ms][DEBUG] START check_boot_completed [2025-09-08 05:58:15][350072605882625][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:58:15][350072605882625][305 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 05:58:15][350072605882625][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:58:15][350072605882625][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 05:58:15][350072605882625][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 05:58:15][350072605882625][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 05:58:15][350072605882625][462 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 9792\nsuccessfulTxPacketsPerSecond: 0.013853965351232657\nretriedTxPackets: 2415\nretriedTxPacketsPerSecond: 0.013853965351232657\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 9301\nsuccessfulRxPacketsPerSecond: 0.013853965351232657\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 05:58:15][350072605882625][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 05:58:16][350072605882625][868 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.772/294.772/294.772/0.000 ms\n [2025-09-08 05:58:16][350072605882625][868 ms][DEBUG] check_internet: online [2025-09-08 05:58:16][350072605882625][868 ms][DEBUG] rawBody.length=1150 [2025-09-08 05:58:16][350072605882625][868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350072605882625\",\"model\":\"SM-F721W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5519\"}'\'' -e'"" [2025-09-08 05:58:16][350072605882625][868 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 05:58:16][350072605882625][868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350072605882625\",\"model\":\"SM-F721W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5519\"}'\'' -e'"" [2025-09-08 05:58:20][350072605882625][4898 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae54670e-0127-4d94-8ff9-6b1c72b7a900","id":"QR_ae54670e-0127-4d94-8ff9-6b1c72b7a900","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 05:58:20][350072605882625][5054 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-08 05:58:20][350072605882625][5054 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-08 05:58:20][350072605882625][5055 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 05:59:03][351877472156112][0 ms][INFO] === Request start === [2025-09-08 05:59:03][351877472156112][1 ms][DEBUG] START check_scloud [2025-09-08 05:59:03][351877472156112][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 05:59:03][351877472156112][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 18660 5020 25100940 239476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 05:59:03][351877472156112][308 ms][DEBUG] targetPkg: running [2025-09-08 05:59:03][351877472156112][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 05:59:03][351877472156112][308 ms][DEBUG] START check_boot_completed [2025-09-08 05:59:03][351877472156112][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:59:03][351877472156112][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 05:59:03][351877472156112][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:59:03][351877472156112][403 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 05:59:03][351877472156112][403 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 05:59:03][351877472156112][403 ms][DEBUG] rawBody.length=1150 [2025-09-08 05:59:03][351877472156112][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472156112\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7263\"}'\'' -e'"" [2025-09-08 05:59:03][351877472156112][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 05:59:03][351877472156112][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472156112\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7263\"}'\'' -e'"" [2025-09-08 05:59:07][351877472156112][4323 ms][DEBUG] proc_open done in 3919 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 05:59:07][351877472156112][4323 ms][DEBUG] END runCmdUntilRes#1 in 3919 ms [2025-09-08 05:59:07][351877472156112][4323 ms][WARN] Detected error: Process with pid 18660 either refused to load frida-agent, or terminated during injectionProcess with pid 18660 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 05:59:07][351877472156112][4323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 05:59:08][351877472156112][4604 ms][DEBUG] SU: done in 281 ms; outsystem 5440 5020 12675692 174524 ep_poll 0 S system_server\n [2025-09-08 05:59:08][351877472156112][4604 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 05:59:08][351877472156112][4745 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 05:59:08][351877472156112][4745 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 05:59:08][351877472156112][4745 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 05:59:08][351877472156112][4869 ms][DEBUG] SU: done in 124 ms; out [2025-09-08 05:59:08][351877472156112][4869 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 05:59:08][351877472156112][5026 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 05:59:10][351877472156112][7041 ms][DEBUG] START check_boot_completed [2025-09-08 05:59:10][351877472156112][7041 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:59:10][351877472156112][7088 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 05:59:10][351877472156112][7088 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:59:10][351877472156112][7135 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 05:59:10][351877472156112][7135 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 05:59:13][351877472156112][10149 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 05:59:13][351877472156112][10150 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472156112\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7263\"}'\'' -e'"" [2025-09-08 05:59:17][351877472156112][13992 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5bb1d9e5-a5b1-44d2-bf69-41726cf12a94","id":"QR_5bb1d9e5-a5b1-44d2-bf69-41726cf12a94","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 05:59:17][351877472156112][14149 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-09-08 05:59:17][351877472156112][14149 ms][DEBUG] END runCmdUntilRes#2 in 3999 ms [2025-09-08 05:59:17][351877472156112][14149 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 05:59:19][351877472156112][0 ms][INFO] === Request start === [2025-09-08 05:59:19][351877472156112][1 ms][DEBUG] START check_scloud [2025-09-08 05:59:19][351877472156112][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 05:59:20][351877472156112][242 ms][DEBUG] SU: done in 241 ms; outu0_a118 21032 5020 23767072 125776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 05:59:20][351877472156112][242 ms][DEBUG] targetPkg: running [2025-09-08 05:59:20][351877472156112][242 ms][DEBUG] END check_scloud in 241 ms [2025-09-08 05:59:20][351877472156112][242 ms][DEBUG] START check_boot_completed [2025-09-08 05:59:20][351877472156112][242 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 05:59:20][351877472156112][273 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 05:59:20][351877472156112][273 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 05:59:20][351877472156112][336 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 05:59:20][351877472156112][336 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 05:59:20][351877472156112][336 ms][DEBUG] rawBody.length=1160 [2025-09-08 05:59:20][351877472156112][336 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472156112\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7958\"}'\'' -e'"" [2025-09-08 05:59:20][351877472156112][336 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 05:59:20][351877472156112][336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472156112\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7958\"}'\'' -e'"" [2025-09-08 05:59:25][351877472156112][5428 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_51d5666d-7eb4-42fa-89b0-79c320fc9ab0","id":"QR_51d5666d-7eb4-42fa-89b0-79c320fc9ab0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 05:59:25][351877472156112][5584 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-08 05:59:25][351877472156112][5584 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-08 05:59:25][351877472156112][5584 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:17:04][351864717565968][1 ms][INFO] === Request start === [2025-09-08 06:17:04][351864717565968][1 ms][DEBUG] START check_scloud [2025-09-08 06:17:04][351864717565968][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:17:04][351864717565968][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 21032 5020 23803804 136420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:17:04][351864717565968][302 ms][DEBUG] targetPkg: running [2025-09-08 06:17:04][351864717565968][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 06:17:04][351864717565968][302 ms][DEBUG] START check_boot_completed [2025-09-08 06:17:04][351864717565968][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:17:04][351864717565968][331 ms][DEBUG] ADB: done in 30 ms; out [2025-09-08 06:17:04][351864717565968][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:17:04][351864717565968][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 06:17:04][351864717565968][378 ms][DEBUG] END check_boot_completed in 76 ms [2025-09-08 06:17:04][351864717565968][378 ms][DEBUG] rawBody.length=1160 [2025-09-08 06:17:04][351864717565968][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864717565968\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7241\"}'\'' -e'"" [2025-09-08 06:17:04][351864717565968][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:17:04][351864717565968][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864717565968\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7241\"}'\'' -e'"" [2025-09-08 06:17:11][351864717565968][7236 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_719783cb-446f-4706-b252-11bac8af9702","id":"QR_719783cb-446f-4706-b252-11bac8af9702","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:17:11][351864717565968][7392 ms][DEBUG] proc_open done in 7014 ms; code=255; res.len=3343 [2025-09-08 06:17:11][351864717565968][7392 ms][DEBUG] END runCmdUntilRes#1 in 7014 ms [2025-09-08 06:17:11][351864717565968][7392 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:17:15][351864717565968][0 ms][INFO] === Request start === [2025-09-08 06:17:15][351864717565968][1 ms][DEBUG] START check_scloud [2025-09-08 06:17:15][351864717565968][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:17:15][351864717565968][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 21032 5020 23974192 143820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:17:15][351864717565968][312 ms][DEBUG] targetPkg: running [2025-09-08 06:17:15][351864717565968][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 06:17:15][351864717565968][312 ms][DEBUG] START check_boot_completed [2025-09-08 06:17:15][351864717565968][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:17:15][351864717565968][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 06:17:15][351864717565968][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:17:15][351864717565968][407 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 06:17:15][351864717565968][408 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 06:17:15][351864717565968][408 ms][DEBUG] rawBody.length=1150 [2025-09-08 06:17:15][351864717565968][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864717565968\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4266\"}'\'' -e'"" [2025-09-08 06:17:15][351864717565968][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:17:15][351864717565968][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864717565968\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4266\"}'\'' -e'"" [2025-09-08 06:17:19][351864717565968][4280 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74b0d76b-41e2-4b57-b8d8-d966ab08bcc4","id":"QR_74b0d76b-41e2-4b57-b8d8-d966ab08bcc4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:17:19][351864717565968][4436 ms][DEBUG] proc_open done in 4028 ms; code=255; res.len=3343 [2025-09-08 06:17:19][351864717565968][4436 ms][DEBUG] END runCmdUntilRes#1 in 4028 ms [2025-09-08 06:17:19][351864717565968][4436 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:19:04][352749389226743][1 ms][INFO] === Request start === [2025-09-08 06:19:04][352749389226743][1 ms][DEBUG] START check_scloud [2025-09-08 06:19:04][352749389226743][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:19:05][352749389226743][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 21032 5020 24120816 155284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:19:05][352749389226743][300 ms][DEBUG] targetPkg: running [2025-09-08 06:19:05][352749389226743][300 ms][DEBUG] END check_scloud in 300 ms [2025-09-08 06:19:05][352749389226743][300 ms][DEBUG] START check_boot_completed [2025-09-08 06:19:05][352749389226743][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:19:05][352749389226743][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 06:19:05][352749389226743][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:19:05][352749389226743][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 06:19:05][352749389226743][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 06:19:05][352749389226743][394 ms][DEBUG] rawBody.length=1160 [2025-09-08 06:19:05][352749389226743][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749389226743\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5633\"}'\'' -e'"" [2025-09-08 06:19:05][352749389226743][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:19:05][352749389226743][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749389226743\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5633\"}'\'' -e'"" [2025-09-08 06:19:11][352749389226743][6424 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a6c60bc6-2975-45c0-b7d5-c74b3b664627","id":"QR_a6c60bc6-2975-45c0-b7d5-c74b3b664627","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:19:11][352749389226743][6580 ms][DEBUG] proc_open done in 6186 ms; code=255; res.len=3343 [2025-09-08 06:19:11][352749389226743][6580 ms][DEBUG] END runCmdUntilRes#1 in 6186 ms [2025-09-08 06:19:11][352749389226743][6580 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:19:14][352749389226743][1 ms][INFO] === Request start === [2025-09-08 06:19:14][352749389226743][1 ms][DEBUG] START check_scloud [2025-09-08 06:19:14][352749389226743][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:19:15][352749389226743][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 21032 5020 24300848 166968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:19:15][352749389226743][312 ms][DEBUG] targetPkg: running [2025-09-08 06:19:15][352749389226743][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 06:19:15][352749389226743][312 ms][DEBUG] START check_boot_completed [2025-09-08 06:19:15][352749389226743][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:19:15][352749389226743][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 06:19:15][352749389226743][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:19:15][352749389226743][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 06:19:15][352749389226743][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 06:19:15][352749389226743][391 ms][DEBUG] rawBody.length=1150 [2025-09-08 06:19:15][352749389226743][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749389226743\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5570\"}'\'' -e'"" [2025-09-08 06:19:15][352749389226743][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:19:15][352749389226743][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749389226743\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5570\"}'\'' -e'"" [2025-09-08 06:19:19][352749389226743][4202 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b90a6dc2-d01f-4a70-8694-a37f63bb59d9","id":"QR_b90a6dc2-d01f-4a70-8694-a37f63bb59d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:19:19][352749389226743][4358 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-09-08 06:19:19][352749389226743][4358 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-09-08 06:19:19][352749389226743][4358 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:19:21][352978604628801][0 ms][INFO] === Request start === [2025-09-08 06:19:21][352978604628801][1 ms][DEBUG] START check_scloud [2025-09-08 06:19:21][352978604628801][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:19:21][352978604628801][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 21032 5020 24482168 178584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:19:21][352978604628801][249 ms][DEBUG] targetPkg: running [2025-09-08 06:19:21][352978604628801][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-08 06:19:21][352978604628801][249 ms][DEBUG] START check_boot_completed [2025-09-08 06:19:21][352978604628801][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:19:21][352978604628801][294 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 06:19:21][352978604628801][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:19:21][352978604628801][342 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 06:19:21][352978604628801][342 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 06:19:21][352978604628801][342 ms][DEBUG] rawBody.length=1150 [2025-09-08 06:19:21][352978604628801][342 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978604628801\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7164\"}'\'' -e'"" [2025-09-08 06:19:21][352978604628801][342 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:19:21][352978604628801][342 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978604628801\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7164\"}'\'' -e'"" [2025-09-08 06:19:24][352978604628801][3809 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e1a120d-e771-4d94-be26-8e602aad4565","id":"QR_9e1a120d-e771-4d94-be26-8e602aad4565","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:19:24][352978604628801][3965 ms][DEBUG] proc_open done in 3622 ms; code=255; res.len=3343 [2025-09-08 06:19:24][352978604628801][3965 ms][DEBUG] END runCmdUntilRes#1 in 3622 ms [2025-09-08 06:19:24][352978604628801][3965 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:19:27][352978604628801][0 ms][INFO] === Request start === [2025-09-08 06:19:27][352978604628801][1 ms][DEBUG] START check_scloud [2025-09-08 06:19:27][352978604628801][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:19:27][352978604628801][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 21032 5020 24622684 190560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:19:27][352978604628801][278 ms][DEBUG] targetPkg: running [2025-09-08 06:19:27][352978604628801][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-08 06:19:27][352978604628801][278 ms][DEBUG] START check_boot_completed [2025-09-08 06:19:27][352978604628801][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:19:27][352978604628801][324 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 06:19:27][352978604628801][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:19:27][352978604628801][387 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 06:19:27][352978604628801][387 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 06:19:27][352978604628801][387 ms][DEBUG] rawBody.length=1160 [2025-09-08 06:19:27][352978604628801][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978604628801\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4232\"}'\'' -e'"" [2025-09-08 06:19:27][352978604628801][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:19:27][352978604628801][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978604628801\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4232\"}'\'' -e'"" [2025-09-08 06:19:32][352978604628801][5073 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_efeab7f8-114f-41f8-8f00-9b75f3074bdc","id":"QR_efeab7f8-114f-41f8-8f00-9b75f3074bdc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:19:32][352978604628801][5229 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-08 06:19:32][352978604628801][5229 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-08 06:19:32][352978604628801][5229 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:36:03][352600223445819][1 ms][INFO] === Request start === [2025-09-08 06:36:03][352600223445819][1 ms][DEBUG] START check_scloud [2025-09-08 06:36:03][352600223445819][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:36:04][352600223445819][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 21032 5020 24721964 198088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:36:04][352600223445819][293 ms][DEBUG] targetPkg: running [2025-09-08 06:36:04][352600223445819][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-08 06:36:04][352600223445819][294 ms][DEBUG] START check_boot_completed [2025-09-08 06:36:04][352600223445819][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:36:04][352600223445819][324 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 06:36:04][352600223445819][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:36:04][352600223445819][371 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 06:36:04][352600223445819][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 06:36:04][352600223445819][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 06:36:04][352600223445819][481 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 10210\nsuccessfulTxPacketsPerSecond: 0.01328202046095252\nretriedTxPackets: 2561\nretriedTxPacketsPerSecond: 0.01328202046095252\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 9662\nsuccessfulRxPacketsPerSecond: 0.01328202046095252\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 06:36:04][352600223445819][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 06:36:05][352600223445819][1965 ms][DEBUG] SU: done in 1484 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.077/204.077/204.077/0.000 ms\n [2025-09-08 06:36:05][352600223445819][1965 ms][DEBUG] check_internet: online [2025-09-08 06:36:05][352600223445819][1965 ms][DEBUG] rawBody.length=1150 [2025-09-08 06:36:05][352600223445819][1965 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600223445819\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2702\"}'\'' -e'"" [2025-09-08 06:36:05][352600223445819][1965 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:36:05][352600223445819][1965 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600223445819\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2702\"}'\'' -e'"" [2025-09-08 06:36:09][352600223445819][5995 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b1f5744-a3f0-488f-8fa1-caef461c4486","id":"QR_1b1f5744-a3f0-488f-8fa1-caef461c4486","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:36:09][352600223445819][6151 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-08 06:36:09][352600223445819][6151 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-08 06:36:09][352600223445819][6151 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:36:12][352600223445819][0 ms][INFO] === Request start === [2025-09-08 06:36:12][352600223445819][1 ms][DEBUG] START check_scloud [2025-09-08 06:36:12][352600223445819][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:36:12][352600223445819][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 21032 5020 24875904 206808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:36:12][352600223445819][254 ms][DEBUG] targetPkg: running [2025-09-08 06:36:12][352600223445819][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-08 06:36:12][352600223445819][254 ms][DEBUG] START check_boot_completed [2025-09-08 06:36:12][352600223445819][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:36:12][352600223445819][301 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 06:36:12][352600223445819][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:36:12][352600223445819][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 06:36:12][352600223445819][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 06:36:12][352600223445819][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 06:36:12][352600223445819][457 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 10210\nsuccessfulTxPacketsPerSecond: 0.01328202046095252\nretriedTxPackets: 2561\nretriedTxPacketsPerSecond: 0.01328202046095252\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 9662\nsuccessfulRxPacketsPerSecond: 0.01328202046095252\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 06:36:12][352600223445819][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 06:36:13][352600223445819][738 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.181/164.181/164.181/0.000 ms\n [2025-09-08 06:36:13][352600223445819][738 ms][DEBUG] check_internet: online [2025-09-08 06:36:13][352600223445819][738 ms][DEBUG] rawBody.length=1160 [2025-09-08 06:36:13][352600223445819][738 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600223445819\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5041\"}'\'' -e'"" [2025-09-08 06:36:13][352600223445819][738 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:36:13][352600223445819][739 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600223445819\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5041\"}'\'' -e'"" [2025-09-08 06:36:18][352600223445819][6221 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5ad0ec3-30b3-477e-8958-63b51190af56","id":"QR_a5ad0ec3-30b3-477e-8958-63b51190af56","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:36:18][352600223445819][6377 ms][DEBUG] proc_open done in 5638 ms; code=255; res.len=3343 [2025-09-08 06:36:18][352600223445819][6377 ms][DEBUG] END runCmdUntilRes#1 in 5639 ms [2025-09-08 06:36:18][352600223445819][6377 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:39:03][354805111317206][1 ms][INFO] === Request start === [2025-09-08 06:39:03][354805111317206][1 ms][DEBUG] START check_scloud [2025-09-08 06:39:03][354805111317206][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:39:03][354805111317206][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 21032 5020 24991812 195944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:39:03][354805111317206][316 ms][DEBUG] targetPkg: running [2025-09-08 06:39:03][354805111317206][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 06:39:03][354805111317206][316 ms][DEBUG] START check_boot_completed [2025-09-08 06:39:03][354805111317206][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:39:03][354805111317206][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 06:39:03][354805111317206][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:39:03][354805111317206][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 06:39:03][354805111317206][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 06:39:03][354805111317206][394 ms][DEBUG] rawBody.length=1150 [2025-09-08 06:39:03][354805111317206][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354805111317206\",\"model\":\"SM-G986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4335\"}'\'' -e'"" [2025-09-08 06:39:03][354805111317206][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:39:03][354805111317206][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354805111317206\",\"model\":\"SM-G986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4335\"}'\'' -e'"" [2025-09-08 06:39:08][354805111317206][4971 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_114afedc-097b-43d3-a9ec-04a92a11ac64","id":"QR_114afedc-097b-43d3-a9ec-04a92a11ac64","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:39:08][354805111317206][5127 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-08 06:39:08][354805111317206][5128 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-08 06:39:08][354805111317206][5128 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:39:10][354805111317206][0 ms][INFO] === Request start === [2025-09-08 06:39:10][354805111317206][1 ms][DEBUG] START check_scloud [2025-09-08 06:39:10][354805111317206][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:39:11][354805111317206][253 ms][DEBUG] SU: done in 253 ms; outu0_a118 21032 5020 25119756 207360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:39:11][354805111317206][253 ms][DEBUG] targetPkg: running [2025-09-08 06:39:11][354805111317206][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-08 06:39:11][354805111317206][254 ms][DEBUG] START check_boot_completed [2025-09-08 06:39:11][354805111317206][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:39:11][354805111317206][300 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 06:39:11][354805111317206][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:39:11][354805111317206][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 06:39:11][354805111317206][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 06:39:11][354805111317206][347 ms][DEBUG] rawBody.length=1160 [2025-09-08 06:39:11][354805111317206][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354805111317206\",\"model\":\"SM-G986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2379\"}'\'' -e'"" [2025-09-08 06:39:11][354805111317206][347 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:39:11][354805111317206][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354805111317206\",\"model\":\"SM-G986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2379\"}'\'' -e'"" [2025-09-08 06:39:15][354805111317206][4268 ms][DEBUG] proc_open done in 3921 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 06:39:15][354805111317206][4268 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-09-08 06:39:15][354805111317206][4268 ms][WARN] Detected error: Process with pid 21032 either refused to load frida-agent, or terminated during injectionProcess with pid 21032 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 06:39:15][354805111317206][4268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 06:39:15][354805111317206][4534 ms][DEBUG] SU: done in 266 ms; outsystem 5440 5020 12749824 200912 ep_poll 0 S system_server\n [2025-09-08 06:39:15][354805111317206][4534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 06:39:15][354805111317206][4674 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 06:39:15][354805111317206][4674 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 06:39:15][354805111317206][4674 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 06:39:15][354805111317206][4801 ms][DEBUG] SU: done in 127 ms; out [2025-09-08 06:39:15][354805111317206][4801 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 06:39:15][354805111317206][4988 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 06:39:17][354805111317206][7002 ms][DEBUG] START check_boot_completed [2025-09-08 06:39:17][354805111317206][7002 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:39:17][354805111317206][7049 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 06:39:17][354805111317206][7049 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:39:17][354805111317206][7097 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 06:39:17][354805111317206][7097 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-08 06:39:20][354805111317206][10110 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 06:39:20][354805111317206][10110 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354805111317206\",\"model\":\"SM-G986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2379\"}'\'' -e'"" [2025-09-08 06:39:25][354805111317206][14953 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a63c9986-c0af-45da-abe0-2a472d0a9736","id":"QR_a63c9986-c0af-45da-abe0-2a472d0a9736","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:39:25][354805111317206][15109 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-08 06:39:25][354805111317206][15109 ms][DEBUG] END runCmdUntilRes#2 in 4999 ms [2025-09-08 06:39:25][354805111317206][15109 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:41:03][350356671741579][0 ms][INFO] === Request start === [2025-09-08 06:41:03][350356671741579][1 ms][DEBUG] START check_scloud [2025-09-08 06:41:03][350356671741579][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:41:03][350356671741579][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 23957 5020 23685400 127168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:41:03][350356671741579][273 ms][DEBUG] targetPkg: running [2025-09-08 06:41:03][350356671741579][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-08 06:41:03][350356671741579][273 ms][DEBUG] START check_boot_completed [2025-09-08 06:41:03][350356671741579][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:41:03][350356671741579][319 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 06:41:03][350356671741579][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:41:03][350356671741579][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 06:41:03][350356671741579][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 06:41:03][350356671741579][366 ms][DEBUG] rawBody.length=1150 [2025-09-08 06:41:03][350356671741579][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356671741579\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1659\"}'\'' -e'"" [2025-09-08 06:41:03][350356671741579][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:41:03][350356671741579][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356671741579\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1659\"}'\'' -e'"" [2025-09-08 06:41:08][350356671741579][4739 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7277be9f-4055-4da1-8767-5e24d9cd1857","id":"QR_7277be9f-4055-4da1-8767-5e24d9cd1857","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:41:08][350356671741579][4896 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-09-08 06:41:08][350356671741579][4896 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-09-08 06:41:08][350356671741579][4896 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:41:10][350356671741579][1 ms][INFO] === Request start === [2025-09-08 06:41:10][350356671741579][1 ms][DEBUG] START check_scloud [2025-09-08 06:41:10][350356671741579][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:41:10][350356671741579][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 23957 5020 23830048 138016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:41:10][350356671741579][304 ms][DEBUG] targetPkg: running [2025-09-08 06:41:10][350356671741579][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 06:41:10][350356671741579][304 ms][DEBUG] START check_boot_completed [2025-09-08 06:41:10][350356671741579][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:41:10][350356671741579][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 06:41:10][350356671741579][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:41:11][350356671741579][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 06:41:11][350356671741579][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 06:41:11][350356671741579][398 ms][DEBUG] rawBody.length=1160 [2025-09-08 06:41:11][350356671741579][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356671741579\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2274\"}'\'' -e'"" [2025-09-08 06:41:11][350356671741579][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:41:11][350356671741579][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356671741579\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2274\"}'\'' -e'"" [2025-09-08 06:41:16][350356671741579][5974 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ecac976-9060-442f-b7e8-22acc6b7f93a","id":"QR_4ecac976-9060-442f-b7e8-22acc6b7f93a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:41:16][350356671741579][6131 ms][DEBUG] proc_open done in 5733 ms; code=255; res.len=3343 [2025-09-08 06:41:16][350356671741579][6131 ms][DEBUG] END runCmdUntilRes#1 in 5733 ms [2025-09-08 06:41:16][350356671741579][6131 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:49:03][350637544170850][1 ms][INFO] === Request start === [2025-09-08 06:49:03][350637544170850][1 ms][DEBUG] START check_scloud [2025-09-08 06:49:03][350637544170850][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:49:03][350637544170850][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 23957 5020 23913892 150292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:49:03][350637544170850][301 ms][DEBUG] targetPkg: running [2025-09-08 06:49:03][350637544170850][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-08 06:49:03][350637544170850][301 ms][DEBUG] START check_boot_completed [2025-09-08 06:49:03][350637544170850][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:49:03][350637544170850][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 06:49:03][350637544170850][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:49:03][350637544170850][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 06:49:03][350637544170850][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 06:49:03][350637544170850][395 ms][DEBUG] rawBody.length=1150 [2025-09-08 06:49:03][350637544170850][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544170850\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8270\"}'\'' -e'"" [2025-09-08 06:49:03][350637544170850][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:49:03][350637544170850][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544170850\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8270\"}'\'' -e'"" [2025-09-08 06:49:08][350637544170850][5206 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e61e40d5-b9e2-49b8-bedb-3f41e0957dc6","id":"QR_e61e40d5-b9e2-49b8-bedb-3f41e0957dc6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:49:08][350637544170850][5362 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-08 06:49:08][350637544170850][5362 ms][DEBUG] END runCmdUntilRes#1 in 4968 ms [2025-09-08 06:49:08][350637544170850][5363 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:49:11][350637544170850][0 ms][INFO] === Request start === [2025-09-08 06:49:11][350637544170850][1 ms][DEBUG] START check_scloud [2025-09-08 06:49:11][350637544170850][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:49:11][350637544170850][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 23957 5020 24106680 161012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:49:11][350637544170850][316 ms][DEBUG] targetPkg: running [2025-09-08 06:49:11][350637544170850][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 06:49:11][350637544170850][316 ms][DEBUG] START check_boot_completed [2025-09-08 06:49:11][350637544170850][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:49:11][350637544170850][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 06:49:11][350637544170850][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:49:11][350637544170850][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 06:49:11][350637544170850][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 06:49:11][350637544170850][425 ms][DEBUG] rawBody.length=1160 [2025-09-08 06:49:11][350637544170850][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544170850\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4095\"}'\'' -e'"" [2025-09-08 06:49:11][350637544170850][425 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:49:11][350637544170850][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544170850\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4095\"}'\'' -e'"" [2025-09-08 06:49:16][350637544170850][5845 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d5f233b-6301-4ad0-a19d-5b51be09926c","id":"QR_0d5f233b-6301-4ad0-a19d-5b51be09926c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:49:17][350637544170850][6001 ms][DEBUG] proc_open done in 5576 ms; code=255; res.len=3343 [2025-09-08 06:49:17][350637544170850][6001 ms][DEBUG] END runCmdUntilRes#1 in 5576 ms [2025-09-08 06:49:17][350637544170850][6002 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:50:03][350824192025657][0 ms][INFO] === Request start === [2025-09-08 06:50:03][350824192025657][1 ms][DEBUG] START check_scloud [2025-09-08 06:50:03][350824192025657][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:50:04][350824192025657][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 23957 5020 24222584 171912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:50:04][350824192025657][285 ms][DEBUG] targetPkg: running [2025-09-08 06:50:04][350824192025657][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-08 06:50:04][350824192025657][285 ms][DEBUG] START check_boot_completed [2025-09-08 06:50:04][350824192025657][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:50:04][350824192025657][316 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 06:50:04][350824192025657][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:50:04][350824192025657][364 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 06:50:04][350824192025657][364 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 06:50:04][350824192025657][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 06:50:04][350824192025657][473 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 10669\nsuccessfulTxPacketsPerSecond: 0.15272751419369834\nretriedTxPackets: 2646\nretriedTxPacketsPerSecond: 0.05644277698462764\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 10068\nsuccessfulRxPacketsPerSecond: 0.12616620737740297\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 06:50:04][350824192025657][473 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 06:50:05][350824192025657][1926 ms][DEBUG] SU: done in 1453 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=109 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.227/199.227/199.227/0.000 ms\n [2025-09-08 06:50:05][350824192025657][1926 ms][DEBUG] check_internet: online [2025-09-08 06:50:05][350824192025657][1926 ms][DEBUG] rawBody.length=1150 [2025-09-08 06:50:05][350824192025657][1926 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192025657\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9068\"}'\'' -e'"" [2025-09-08 06:50:05][350824192025657][1926 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:50:05][350824192025657][1926 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192025657\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9068\"}'\'' -e'"" [2025-09-08 06:50:09][350824192025657][5643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b620f437-06dd-4bb3-8929-a61ed2c5201c","id":"QR_b620f437-06dd-4bb3-8929-a61ed2c5201c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:50:09][350824192025657][5799 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-08 06:50:09][350824192025657][5800 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-08 06:50:09][350824192025657][5800 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:50:11][350824192025657][0 ms][INFO] === Request start === [2025-09-08 06:50:11][350824192025657][1 ms][DEBUG] START check_scloud [2025-09-08 06:50:11][350824192025657][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:50:12][350824192025657][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 23957 5020 24379456 183584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:50:12][350824192025657][309 ms][DEBUG] targetPkg: running [2025-09-08 06:50:12][350824192025657][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 06:50:12][350824192025657][309 ms][DEBUG] START check_boot_completed [2025-09-08 06:50:12][350824192025657][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:50:12][350824192025657][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 06:50:12][350824192025657][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:50:12][350824192025657][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 06:50:12][350824192025657][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 06:50:12][350824192025657][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 06:50:12][350824192025657][496 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 10669\nsuccessfulTxPacketsPerSecond: 0.15272751419369834\nretriedTxPackets: 2646\nretriedTxPacketsPerSecond: 0.05644277698462764\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 10068\nsuccessfulRxPacketsPerSecond: 0.12616620737740297\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 06:50:12][350824192025657][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 06:50:12][350824192025657][809 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=109 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.231/203.231/203.231/0.000 ms\n [2025-09-08 06:50:12][350824192025657][809 ms][DEBUG] check_internet: online [2025-09-08 06:50:12][350824192025657][809 ms][DEBUG] rawBody.length=1160 [2025-09-08 06:50:12][350824192025657][809 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192025657\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4199\"}'\'' -e'"" [2025-09-08 06:50:12][350824192025657][809 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:50:12][350824192025657][809 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192025657\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4199\"}'\'' -e'"" [2025-09-08 06:50:17][350824192025657][5963 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d160d06e-d4ca-4bbe-a4d0-663f35754db7","id":"QR_d160d06e-d4ca-4bbe-a4d0-663f35754db7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:50:17][350824192025657][6120 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 06:50:17][350824192025657][6120 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 06:50:17][350824192025657][6120 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:55:03][353744504268158][1 ms][INFO] === Request start === [2025-09-08 06:55:03][353744504268158][1 ms][DEBUG] START check_scloud [2025-09-08 06:55:03][353744504268158][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:55:03][353744504268158][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 23957 5020 24495360 194092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:55:03][353744504268158][292 ms][DEBUG] targetPkg: running [2025-09-08 06:55:03][353744504268158][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-08 06:55:03][353744504268158][292 ms][DEBUG] START check_boot_completed [2025-09-08 06:55:03][353744504268158][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:55:03][353744504268158][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 06:55:03][353744504268158][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:55:03][353744504268158][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 06:55:03][353744504268158][370 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 06:55:03][353744504268158][370 ms][DEBUG] rawBody.length=1150 [2025-09-08 06:55:03][353744504268158][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353744504268158\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9654\"}'\'' -e'"" [2025-09-08 06:55:03][353744504268158][370 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:55:03][353744504268158][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353744504268158\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9654\"}'\'' -e'"" [2025-09-08 06:55:08][353744504268158][5369 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81d4cdf8-9ff5-4697-a121-77e7f3bacca9","id":"QR_81d4cdf8-9ff5-4697-a121-77e7f3bacca9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:55:08][353744504268158][5525 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3343 [2025-09-08 06:55:08][353744504268158][5525 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-08 06:55:08][353744504268158][5525 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:55:11][353744504268158][0 ms][INFO] === Request start === [2025-09-08 06:55:11][353744504268158][1 ms][DEBUG] START check_scloud [2025-09-08 06:55:11][353744504268158][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:55:11][353744504268158][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 23957 5020 24662536 205920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:55:11][353744504268158][244 ms][DEBUG] targetPkg: running [2025-09-08 06:55:11][353744504268158][244 ms][DEBUG] END check_scloud in 244 ms [2025-09-08 06:55:11][353744504268158][244 ms][DEBUG] START check_boot_completed [2025-09-08 06:55:11][353744504268158][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:55:11][353744504268158][291 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 06:55:11][353744504268158][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:55:11][353744504268158][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 06:55:11][353744504268158][337 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 06:55:11][353744504268158][337 ms][DEBUG] rawBody.length=1160 [2025-09-08 06:55:11][353744504268158][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353744504268158\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6221\"}'\'' -e'"" [2025-09-08 06:55:11][353744504268158][337 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:55:11][353744504268158][338 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353744504268158\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6221\"}'\'' -e'"" [2025-09-08 06:55:16][353744504268158][5321 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_595e9997-9871-42c9-bf20-6a90e426c395","id":"QR_595e9997-9871-42c9-bf20-6a90e426c395","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:55:16][353744504268158][5477 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-08 06:55:16][353744504268158][5477 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-09-08 06:55:16][353744504268158][5477 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 06:59:06][353548753658807][1 ms][INFO] === Request start === [2025-09-08 06:59:06][353548753658807][1 ms][DEBUG] START check_scloud [2025-09-08 06:59:06][353548753658807][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 06:59:07][353548753658807][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 23957 5020 24767076 217148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 06:59:07][353548753658807][271 ms][DEBUG] targetPkg: running [2025-09-08 06:59:07][353548753658807][271 ms][DEBUG] END check_scloud in 270 ms [2025-09-08 06:59:07][353548753658807][271 ms][DEBUG] START check_boot_completed [2025-09-08 06:59:07][353548753658807][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 06:59:07][353548753658807][318 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 06:59:07][353548753658807][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 06:59:07][353548753658807][366 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 06:59:07][353548753658807][367 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 06:59:07][353548753658807][367 ms][DEBUG] rawBody.length=1160 [2025-09-08 06:59:07][353548753658807][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548753658807\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8424\"}'\'' -e'"" [2025-09-08 06:59:07][353548753658807][367 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 06:59:07][353548753658807][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548753658807\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8424\"}'\'' -e'"" [2025-09-08 06:59:12][353548753658807][5754 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a52be3a-5da5-45c2-84dc-49e04157d903","id":"QR_5a52be3a-5da5-45c2-84dc-49e04157d903","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 06:59:12][353548753658807][5910 ms][DEBUG] proc_open done in 5543 ms; code=255; res.len=3343 [2025-09-08 06:59:12][353548753658807][5910 ms][DEBUG] END runCmdUntilRes#1 in 5543 ms [2025-09-08 06:59:12][353548753658807][5910 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:02:03][353818875114447][1 ms][INFO] === Request start === [2025-09-08 07:02:03][353818875114447][1 ms][DEBUG] START check_scloud [2025-09-08 07:02:03][353818875114447][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:02:04][353818875114447][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 23957 5020 24874824 229412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:02:04][353818875114447][301 ms][DEBUG] targetPkg: running [2025-09-08 07:02:04][353818875114447][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-08 07:02:04][353818875114447][301 ms][DEBUG] START check_boot_completed [2025-09-08 07:02:04][353818875114447][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:02:04][353818875114447][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 07:02:04][353818875114447][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:02:04][353818875114447][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:02:04][353818875114447][380 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 07:02:04][353818875114447][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:02:04][353818875114447][505 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 10941\nsuccessfulTxPacketsPerSecond: 0.3279787498603387\nretriedTxPackets: 2732\nretriedTxPacketsPerSecond: 0.09010405215943372\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 10298\nsuccessfulRxPacketsPerSecond: 0.2811246427374332\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:02:04][353818875114447][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:02:05][353818875114447][1958 ms][DEBUG] SU: done in 1454 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.258/203.258/203.258/0.000 ms\n [2025-09-08 07:02:05][353818875114447][1959 ms][DEBUG] check_internet: online [2025-09-08 07:02:05][353818875114447][1959 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:02:05][353818875114447][1959 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818875114447\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1886\"}'\'' -e'"" [2025-09-08 07:02:05][353818875114447][1959 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:02:05][353818875114447][1959 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818875114447\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1886\"}'\'' -e'"" [2025-09-08 07:02:09][353818875114447][5784 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e60186d7-c56c-49fa-8807-9555efba1126","id":"QR_e60186d7-c56c-49fa-8807-9555efba1126","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:02:09][353818875114447][5941 ms][DEBUG] proc_open done in 3982 ms; code=255; res.len=3343 [2025-09-08 07:02:09][353818875114447][5941 ms][DEBUG] END runCmdUntilRes#1 in 3982 ms [2025-09-08 07:02:09][353818875114447][5941 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:04:03][359142812181292][0 ms][INFO] === Request start === [2025-09-08 07:04:03][359142812181292][1 ms][DEBUG] START check_scloud [2025-09-08 07:04:03][359142812181292][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:04:03][359142812181292][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 23957 5020 24982576 240532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:04:03][359142812181292][300 ms][DEBUG] targetPkg: running [2025-09-08 07:04:03][359142812181292][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 07:04:03][359142812181292][300 ms][DEBUG] START check_boot_completed [2025-09-08 07:04:03][359142812181292][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:04:03][359142812181292][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 07:04:03][359142812181292][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:04:03][359142812181292][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:04:03][359142812181292][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 07:04:03][359142812181292][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:04:03][359142812181292][487 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 10941\nsuccessfulTxPacketsPerSecond: 0.3279787498603387\nretriedTxPackets: 2732\nretriedTxPacketsPerSecond: 0.09010405215943372\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 10298\nsuccessfulRxPacketsPerSecond: 0.2811246427374332\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:04:03][359142812181292][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:04:04][359142812181292][800 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.546/202.546/202.546/0.000 ms\n [2025-09-08 07:04:04][359142812181292][800 ms][DEBUG] check_internet: online [2025-09-08 07:04:04][359142812181292][800 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:04:04][359142812181292][800 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359142812181292\",\"model\":\"SM-N981N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2364\"}'\'' -e'"" [2025-09-08 07:04:04][359142812181292][800 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:04:04][359142812181292][800 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359142812181292\",\"model\":\"SM-N981N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2364\"}'\'' -e'"" [2025-09-08 07:04:08][359142812181292][4658 ms][DEBUG] proc_open done in 3858 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 07:04:08][359142812181292][4658 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-08 07:04:08][359142812181292][4658 ms][WARN] Detected error: Process with pid 23957 either refused to load frida-agent, or terminated during injectionProcess with pid 23957 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 07:04:08][359142812181292][4658 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 07:04:08][359142812181292][4955 ms][DEBUG] SU: done in 297 ms; outsystem 5440 5020 12749820 189716 ep_poll 0 S system_server\n [2025-09-08 07:04:08][359142812181292][4955 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 07:04:08][359142812181292][5096 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 07:04:08][359142812181292][5096 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 07:04:08][359142812181292][5096 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 07:04:08][359142812181292][5236 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 07:04:08][359142812181292][5236 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 07:04:08][359142812181292][5392 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 07:04:10][359142812181292][7407 ms][DEBUG] START check_boot_completed [2025-09-08 07:04:10][359142812181292][7408 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:04:10][359142812181292][7454 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:04:10][359142812181292][7454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:04:10][359142812181292][7501 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:04:10][359142812181292][7501 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 07:04:13][359142812181292][10516 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 07:04:13][359142812181292][10516 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359142812181292\",\"model\":\"SM-N981N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2364\"}'\'' -e'"" [2025-09-08 07:04:18][359142812181292][14812 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b51bd285-4f4d-49d3-be73-e68381bd0885","id":"QR_b51bd285-4f4d-49d3-be73-e68381bd0885","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:04:18][359142812181292][14968 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-09-08 07:04:18][359142812181292][14968 ms][DEBUG] END runCmdUntilRes#2 in 4452 ms [2025-09-08 07:04:18][359142812181292][14968 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:04:20][359142812181292][1 ms][INFO] === Request start === [2025-09-08 07:04:20][359142812181292][1 ms][DEBUG] START check_scloud [2025-09-08 07:04:20][359142812181292][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:04:20][359142812181292][241 ms][DEBUG] SU: done in 239 ms; outu0_a118 25987 5020 23813660 124140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:04:20][359142812181292][241 ms][DEBUG] targetPkg: running [2025-09-08 07:04:20][359142812181292][241 ms][DEBUG] END check_scloud in 240 ms [2025-09-08 07:04:20][359142812181292][241 ms][DEBUG] START check_boot_completed [2025-09-08 07:04:20][359142812181292][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:04:20][359142812181292][287 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:04:20][359142812181292][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:04:21][359142812181292][350 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 07:04:21][359142812181292][350 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:04:21][359142812181292][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:04:21][359142812181292][490 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 10941\nsuccessfulTxPacketsPerSecond: 0.3279787498603387\nretriedTxPackets: 2732\nretriedTxPacketsPerSecond: 0.09010405215943372\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 10298\nsuccessfulRxPacketsPerSecond: 0.2811246427374332\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:04:21][359142812181292][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:04:21][359142812181292][787 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.903/199.903/199.903/0.000 ms\n [2025-09-08 07:04:21][359142812181292][787 ms][DEBUG] check_internet: online [2025-09-08 07:04:21][359142812181292][788 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:04:21][359142812181292][788 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359142812181292\",\"model\":\"SM-N981N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1107\"}'\'' -e'"" [2025-09-08 07:04:21][359142812181292][788 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:04:21][359142812181292][788 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359142812181292\",\"model\":\"SM-N981N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1107\"}'\'' -e'"" [2025-09-08 07:04:26][359142812181292][5927 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5f5d12c-a018-4301-83fd-742997a76207","id":"QR_e5f5d12c-a018-4301-83fd-742997a76207","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:04:26][359142812181292][6083 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 07:04:26][359142812181292][6083 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 07:04:26][359142812181292][6083 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:07:03][350320365887148][1 ms][INFO] === Request start === [2025-09-08 07:07:03][350320365887148][1 ms][DEBUG] START check_scloud [2025-09-08 07:07:03][350320365887148][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:07:04][350320365887148][248 ms][DEBUG] SU: done in 246 ms; outu0_a118 25987 5020 23845296 137512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:07:04][350320365887148][248 ms][DEBUG] targetPkg: running [2025-09-08 07:07:04][350320365887148][248 ms][DEBUG] END check_scloud in 247 ms [2025-09-08 07:07:04][350320365887148][248 ms][DEBUG] START check_boot_completed [2025-09-08 07:07:04][350320365887148][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:07:04][350320365887148][279 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 07:07:04][350320365887148][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:07:04][350320365887148][326 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:07:04][350320365887148][326 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 07:07:04][350320365887148][326 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:07:04][350320365887148][326 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320365887148\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8295\"}'\'' -e'"" [2025-09-08 07:07:04][350320365887148][326 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:07:04][350320365887148][326 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320365887148\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8295\"}'\'' -e'"" [2025-09-08 07:07:08][350320365887148][4918 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d61ae864-dc74-4c40-9e9c-6bc304756ef5","id":"QR_d61ae864-dc74-4c40-9e9c-6bc304756ef5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:07:08][350320365887148][5074 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3343 [2025-09-08 07:07:08][350320365887148][5074 ms][DEBUG] END runCmdUntilRes#1 in 4749 ms [2025-09-08 07:07:08][350320365887148][5074 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:07:12][355339320771259][0 ms][INFO] === Request start === [2025-09-08 07:07:12][355339320771259][1 ms][DEBUG] START check_scloud [2025-09-08 07:07:12][355339320771259][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:07:12][355339320771259][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 25987 5020 23971448 149132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:07:12][355339320771259][301 ms][DEBUG] targetPkg: running [2025-09-08 07:07:12][355339320771259][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-08 07:07:12][355339320771259][301 ms][DEBUG] START check_boot_completed [2025-09-08 07:07:12][355339320771259][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:07:12][355339320771259][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 07:07:12][355339320771259][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:07:12][355339320771259][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:07:12][355339320771259][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 07:07:12][355339320771259][379 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:07:12][355339320771259][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355339320771259\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3788\"}'\'' -e'"" [2025-09-08 07:07:12][355339320771259][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:07:12][355339320771259][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355339320771259\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3788\"}'\'' -e'"" [2025-09-08 07:07:18][355339320771259][6003 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e57775f0-6297-4f2a-acb0-f32c16d2bb5f","id":"QR_e57775f0-6297-4f2a-acb0-f32c16d2bb5f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:07:18][355339320771259][6159 ms][DEBUG] proc_open done in 5779 ms; code=255; res.len=3343 [2025-09-08 07:07:18][355339320771259][6159 ms][DEBUG] END runCmdUntilRes#1 in 5779 ms [2025-09-08 07:07:18][355339320771259][6159 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:07:23][352651795689078][0 ms][INFO] === Request start === [2025-09-08 07:07:23][352651795689078][1 ms][DEBUG] START check_scloud [2025-09-08 07:07:23][352651795689078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:07:24][352651795689078][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 25987 5020 24122112 160204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:07:24][352651795689078][298 ms][DEBUG] targetPkg: running [2025-09-08 07:07:24][352651795689078][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-08 07:07:24][352651795689078][298 ms][DEBUG] START check_boot_completed [2025-09-08 07:07:24][352651795689078][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:07:24][352651795689078][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:07:24][352651795689078][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:07:24][352651795689078][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 07:07:24][352651795689078][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:07:24][352651795689078][407 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:07:24][352651795689078][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352651795689078\",\"model\":\"SM-G991U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6592\"}'\'' -e'"" [2025-09-08 07:07:24][352651795689078][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:07:24][352651795689078][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352651795689078\",\"model\":\"SM-G991U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6592\"}'\'' -e'"" [2025-09-08 07:07:29][352651795689078][5296 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f20885e-467a-4146-ae5a-9364cbcc37ff","id":"QR_9f20885e-467a-4146-ae5a-9364cbcc37ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:07:29][352651795689078][5452 ms][DEBUG] proc_open done in 5045 ms; code=255; res.len=3343 [2025-09-08 07:07:29][352651795689078][5452 ms][DEBUG] END runCmdUntilRes#1 in 5046 ms [2025-09-08 07:07:29][352651795689078][5452 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:07:35][355123542970281][0 ms][INFO] === Request start === [2025-09-08 07:07:35][355123542970281][1 ms][DEBUG] START check_scloud [2025-09-08 07:07:35][355123542970281][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:07:35][355123542970281][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 25987 5020 24268736 171212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:07:35][355123542970281][304 ms][DEBUG] targetPkg: running [2025-09-08 07:07:35][355123542970281][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 07:07:35][355123542970281][304 ms][DEBUG] START check_boot_completed [2025-09-08 07:07:35][355123542970281][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:07:35][355123542970281][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:07:35][355123542970281][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:07:35][355123542970281][413 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 07:07:35][355123542970281][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:07:35][355123542970281][413 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:07:35][355123542970281][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355123542970281\",\"model\":\"SM-S911U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7786\"}'\'' -e'"" [2025-09-08 07:07:35][355123542970281][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:07:35][355123542970281][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355123542970281\",\"model\":\"SM-S911U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7786\"}'\'' -e'"" [2025-09-08 07:07:40][355123542970281][5099 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f409549-86d1-4b5d-97b4-1040bb7c6a38","id":"QR_0f409549-86d1-4b5d-97b4-1040bb7c6a38","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:07:40][355123542970281][5255 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-08 07:07:40][355123542970281][5255 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-08 07:07:40][355123542970281][5255 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:08:04][350256190467583][0 ms][INFO] === Request start === [2025-09-08 07:08:04][350256190467583][1 ms][DEBUG] START check_scloud [2025-09-08 07:08:04][350256190467583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:08:04][350256190467583][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 25987 5020 24360064 183248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:08:04][350256190467583][261 ms][DEBUG] targetPkg: running [2025-09-08 07:08:04][350256190467583][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-08 07:08:04][350256190467583][261 ms][DEBUG] START check_boot_completed [2025-09-08 07:08:04][350256190467583][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:08:04][350256190467583][308 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:08:04][350256190467583][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:08:04][350256190467583][370 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 07:08:04][350256190467583][370 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:08:04][350256190467583][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:08:04][350256190467583][495 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 11042\nsuccessfulTxPacketsPerSecond: 0.33124419912695835\nretriedTxPackets: 2769\nretriedTxPacketsPerSecond: 0.12134688482868772\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 10387\nsuccessfulRxPacketsPerSecond: 0.2918884526960326\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:08:04][350256190467583][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:08:06][350256190467583][2214 ms][DEBUG] SU: done in 1718 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.388/196.388/196.388/0.000 ms\n [2025-09-08 07:08:06][350256190467583][2214 ms][DEBUG] check_internet: online [2025-09-08 07:08:06][350256190467583][2214 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:08:06][350256190467583][2214 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256190467583\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2240\"}'\'' -e'"" [2025-09-08 07:08:06][350256190467583][2214 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:08:06][350256190467583][2214 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256190467583\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2240\"}'\'' -e'"" [2025-09-08 07:08:09][350256190467583][5978 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_01edfd35-d104-4636-aa9c-dfdd6da1fcf3","id":"QR_01edfd35-d104-4636-aa9c-dfdd6da1fcf3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:08:10][350256190467583][6134 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-08 07:08:10][350256190467583][6134 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-09-08 07:08:10][350256190467583][6134 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:08:12][350256190467583][0 ms][INFO] === Request start === [2025-09-08 07:08:12][350256190467583][1 ms][DEBUG] START check_scloud [2025-09-08 07:08:12][350256190467583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:08:12][350256190467583][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 25987 5020 24496520 194224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:08:12][350256190467583][267 ms][DEBUG] targetPkg: running [2025-09-08 07:08:12][350256190467583][267 ms][DEBUG] END check_scloud in 267 ms [2025-09-08 07:08:12][350256190467583][267 ms][DEBUG] START check_boot_completed [2025-09-08 07:08:12][350256190467583][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:08:12][350256190467583][298 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 07:08:12][350256190467583][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:08:12][350256190467583][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:08:12][350256190467583][345 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 07:08:12][350256190467583][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:08:12][350256190467583][470 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 11042\nsuccessfulTxPacketsPerSecond: 0.33124419912695835\nretriedTxPackets: 2769\nretriedTxPacketsPerSecond: 0.12134688482868772\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 10387\nsuccessfulRxPacketsPerSecond: 0.2918884526960326\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:08:12][350256190467583][470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:08:13][350256190467583][830 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.539/251.539/251.539/0.000 ms\n [2025-09-08 07:08:13][350256190467583][830 ms][DEBUG] check_internet: online [2025-09-08 07:08:13][350256190467583][830 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:08:13][350256190467583][830 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256190467583\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6996\"}'\'' -e'"" [2025-09-08 07:08:13][350256190467583][830 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:08:13][350256190467583][830 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256190467583\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6996\"}'\'' -e'"" [2025-09-08 07:08:18][350256190467583][5875 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4362bc3-a228-4445-b7ff-67e3b69a1306","id":"QR_e4362bc3-a228-4445-b7ff-67e3b69a1306","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:08:18][350256190467583][6031 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-08 07:08:18][350256190467583][6031 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-08 07:08:18][350256190467583][6031 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:08:23][350593473244291][0 ms][INFO] === Request start === [2025-09-08 07:08:23][350593473244291][1 ms][DEBUG] START check_scloud [2025-09-08 07:08:23][350593473244291][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:08:24][350593473244291][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 25987 5020 24623944 206124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:08:24][350593473244291][312 ms][DEBUG] targetPkg: running [2025-09-08 07:08:24][350593473244291][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 07:08:24][350593473244291][312 ms][DEBUG] START check_boot_completed [2025-09-08 07:08:24][350593473244291][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:08:24][350593473244291][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:08:24][350593473244291][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:08:24][350593473244291][421 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 07:08:24][350593473244291][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:08:24][350593473244291][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:08:24][350593473244291][577 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 11042\nsuccessfulTxPacketsPerSecond: 0.33124419912695835\nretriedTxPackets: 2769\nretriedTxPacketsPerSecond: 0.12134688482868772\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 10387\nsuccessfulRxPacketsPerSecond: 0.2918884526960326\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:08:24][350593473244291][577 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:08:24][350593473244291][936 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.304/253.304/253.304/0.000 ms\n [2025-09-08 07:08:24][350593473244291][937 ms][DEBUG] check_internet: online [2025-09-08 07:08:24][350593473244291][937 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:08:24][350593473244291][937 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350593473244291\",\"model\":\"SM-A125U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6887\"}'\'' -e'"" [2025-09-08 07:08:24][350593473244291][937 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:08:24][350593473244291][937 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350593473244291\",\"model\":\"SM-A125U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6887\"}'\'' -e'"" [2025-09-08 07:08:29][350593473244291][5685 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1d3a7fb-af11-4e43-848b-f404a4782c43","id":"QR_a1d3a7fb-af11-4e43-848b-f404a4782c43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:08:29][350593473244291][5841 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-08 07:08:29][350593473244291][5841 ms][DEBUG] END runCmdUntilRes#1 in 4904 ms [2025-09-08 07:08:29][350593473244291][5842 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:08:33][350593473244291][0 ms][INFO] === Request start === [2025-09-08 07:08:33][350593473244291][1 ms][DEBUG] START check_scloud [2025-09-08 07:08:33][350593473244291][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:08:33][350593473244291][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 25987 5020 24772524 216804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:08:33][350593473244291][296 ms][DEBUG] targetPkg: running [2025-09-08 07:08:33][350593473244291][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-08 07:08:33][350593473244291][296 ms][DEBUG] START check_boot_completed [2025-09-08 07:08:33][350593473244291][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:08:33][350593473244291][342 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:08:33][350593473244291][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:08:33][350593473244291][391 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 07:08:33][350593473244291][391 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 07:08:33][350593473244291][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:08:33][350593473244291][514 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 11042\nsuccessfulTxPacketsPerSecond: 0.33124419912695835\nretriedTxPackets: 2769\nretriedTxPacketsPerSecond: 0.12134688482868772\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 10387\nsuccessfulRxPacketsPerSecond: 0.2918884526960326\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:08:33][350593473244291][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:08:33][350593473244291][874 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=260 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 260.087/260.087/260.087/0.000 ms\n [2025-09-08 07:08:33][350593473244291][874 ms][DEBUG] check_internet: online [2025-09-08 07:08:33][350593473244291][874 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:08:33][350593473244291][874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350593473244291\",\"model\":\"SM-A125U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7154\"}'\'' -e'"" [2025-09-08 07:08:33][350593473244291][874 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:08:33][350593473244291][874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350593473244291\",\"model\":\"SM-A125U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7154\"}'\'' -e'"" [2025-09-08 07:08:37][350593473244291][4310 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_90fa340a-6efe-4813-aec7-15554cdd6ad1","id":"QR_90fa340a-6efe-4813-aec7-15554cdd6ad1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:08:37][350593473244291][4466 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-08 07:08:37][350593473244291][4466 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-09-08 07:08:37][350593473244291][4466 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:09:03][351240640492531][0 ms][INFO] === Request start === [2025-09-08 07:09:03][351240640492531][1 ms][DEBUG] START check_scloud [2025-09-08 07:09:03][351240640492531][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:09:03][351240640492531][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 25987 5020 24903780 229228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:09:03][351240640492531][290 ms][DEBUG] targetPkg: running [2025-09-08 07:09:03][351240640492531][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 07:09:03][351240640492531][290 ms][DEBUG] START check_boot_completed [2025-09-08 07:09:03][351240640492531][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:09:03][351240640492531][337 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:09:03][351240640492531][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:09:03][351240640492531][399 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 07:09:03][351240640492531][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:09:03][351240640492531][399 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:09:03][351240640492531][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640492531\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6505\"}'\'' -e'"" [2025-09-08 07:09:03][351240640492531][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:09:03][351240640492531][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640492531\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6505\"}'\'' -e'"" [2025-09-08 07:09:07][351240640492531][4023 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3f7b74b-abb1-42f9-a706-176af84a1cf8","id":"QR_a3f7b74b-abb1-42f9-a706-176af84a1cf8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:09:07][351240640492531][4179 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-09-08 07:09:07][351240640492531][4179 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-08 07:09:07][351240640492531][4179 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:09:10][351240640492531][1 ms][INFO] === Request start === [2025-09-08 07:09:10][351240640492531][1 ms][DEBUG] START check_scloud [2025-09-08 07:09:10][351240640492531][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:09:10][351240640492531][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 25987 5020 25027948 240184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:09:10][351240640492531][250 ms][DEBUG] targetPkg: running [2025-09-08 07:09:10][351240640492531][250 ms][DEBUG] END check_scloud in 249 ms [2025-09-08 07:09:10][351240640492531][251 ms][DEBUG] START check_boot_completed [2025-09-08 07:09:10][351240640492531][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:09:10][351240640492531][297 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:09:10][351240640492531][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:09:10][351240640492531][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:09:10][351240640492531][344 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 07:09:10][351240640492531][344 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:09:10][351240640492531][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640492531\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8931\"}'\'' -e'"" [2025-09-08 07:09:10][351240640492531][344 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:09:10][351240640492531][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640492531\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8931\"}'\'' -e'"" [2025-09-08 07:09:14][351240640492531][4125 ms][DEBUG] proc_open done in 3781 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 07:09:14][351240640492531][4125 ms][DEBUG] END runCmdUntilRes#1 in 3781 ms [2025-09-08 07:09:14][351240640492531][4125 ms][WARN] Detected error: Process with pid 25987 either refused to load frida-agent, or terminated during injectionProcess with pid 25987 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 07:09:14][351240640492531][4125 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 07:09:14][351240640492531][4374 ms][DEBUG] SU: done in 249 ms; outsystem 5440 5020 12747332 185516 ep_poll 0 S system_server\nsystem 27317 1 12546708 115700 ptrace_stop 0 t system_server\n [2025-09-08 07:09:14][351240640492531][4374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 07:09:14][351240640492531][4500 ms][DEBUG] SU: done in 126 ms; out [2025-09-08 07:09:14][351240640492531][4500 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 07:09:14][351240640492531][4500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 07:09:14][351240640492531][4624 ms][DEBUG] SU: done in 124 ms; out [2025-09-08 07:09:14][351240640492531][4624 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 07:09:14][351240640492531][4827 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 07:09:16][351240640492531][6842 ms][DEBUG] START check_boot_completed [2025-09-08 07:09:16][351240640492531][6842 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:09:16][351240640492531][6889 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:09:16][351240640492531][6889 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:09:17][351240640492531][6936 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:09:17][351240640492531][6936 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 07:09:20][351240640492531][9951 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 07:09:20][351240640492531][9951 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640492531\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8931\"}'\'' -e'"" [2025-09-08 07:09:20][351240640492531][10515 ms][DEBUG] proc_open done in 564 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-08 07:09:20][351240640492531][10515 ms][DEBUG] END runCmdUntilRes#2 in 564 ms [2025-09-08 07:09:20][351240640492531][10515 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-08 07:09:20][351240640492531][10515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 07:09:20][351240640492531][10810 ms][DEBUG] SU: done in 295 ms; out [2025-09-08 07:10:03][359118663722707][0 ms][INFO] === Request start === [2025-09-08 07:10:03][359118663722707][1 ms][DEBUG] START check_scloud [2025-09-08 07:10:03][359118663722707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:10:04][359118663722707][434 ms][DEBUG] SU: done in 433 ms; out [2025-09-08 07:10:04][359118663722707][434 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 07:10:04][359118663722707][465 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 07:10:04][359118663722707][465 ms][DEBUG] check_devices: device found [2025-09-08 07:10:04][359118663722707][465 ms][WARN] targetPkg: not running, restarting [2025-09-08 07:10:04][359118663722707][465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 07:10:04][359118663722707][606 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 07:10:04][359118663722707][606 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 07:10:04][359118663722707][809 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 07:10:06][359118663722707][2824 ms][DEBUG] END check_scloud in 2824 ms [2025-09-08 07:10:06][359118663722707][2824 ms][DEBUG] START check_boot_completed [2025-09-08 07:10:06][359118663722707][2824 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:10:06][359118663722707][2871 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:10:06][359118663722707][2871 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:10:06][359118663722707][2934 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 07:10:06][359118663722707][2934 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 07:10:06][359118663722707][2935 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:10:06][359118663722707][3137 ms][DEBUG] SU: done in 202 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 111\nsuccessfulTxPacketsPerSecond: 5.972026522578611\nretriedTxPackets: 13\nretriedTxPacketsPerSecond: 0.8733275775910263\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 100\nsuccessfulRxPacketsPerSecond: 6.072657540162309\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:10:06][359118663722707][3137 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:10:07][359118663722707][3965 ms][DEBUG] SU: done in 828 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.147/192.147/192.147/0.000 ms\n [2025-09-08 07:10:07][359118663722707][3965 ms][DEBUG] check_internet: online [2025-09-08 07:10:07][359118663722707][3965 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:10:07][359118663722707][3965 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359118663722707\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2046\"}'\'' -e'"" [2025-09-08 07:10:07][359118663722707][3965 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:10:07][359118663722707][3965 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359118663722707\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2046\"}'\'' -e'"" [2025-09-08 07:10:14][359118663722707][10541 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0373e2a1-6b1c-4d45-875a-71df3171deb1","id":"QR_0373e2a1-6b1c-4d45-875a-71df3171deb1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:10:14][359118663722707][10697 ms][DEBUG] proc_open done in 6732 ms; code=255; res.len=3343 [2025-09-08 07:10:14][359118663722707][10697 ms][DEBUG] END runCmdUntilRes#1 in 6732 ms [2025-09-08 07:10:14][359118663722707][10698 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:10:16][359118663722707][0 ms][INFO] === Request start === [2025-09-08 07:10:16][359118663722707][1 ms][DEBUG] START check_scloud [2025-09-08 07:10:16][359118663722707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:10:17][359118663722707][355 ms][DEBUG] SU: done in 354 ms; outu0_a118 30612 27480 23615972 112164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:10:17][359118663722707][355 ms][DEBUG] targetPkg: running [2025-09-08 07:10:17][359118663722707][355 ms][DEBUG] END check_scloud in 354 ms [2025-09-08 07:10:17][359118663722707][355 ms][DEBUG] START check_boot_completed [2025-09-08 07:10:17][359118663722707][355 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:10:17][359118663722707][401 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:10:17][359118663722707][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:10:17][359118663722707][448 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:10:17][359118663722707][448 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 07:10:17][359118663722707][448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:10:17][359118663722707][573 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 236\nsuccessfulTxPacketsPerSecond: 20.458391614893795\nretriedTxPackets: 27\nretriedTxPacketsPerSecond: 1.8196398361422568\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 217\nsuccessfulRxPacketsPerSecond: 18.490801969766643\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:10:17][359118663722707][573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:10:17][359118663722707][870 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=168 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 168.271/168.271/168.271/0.000 ms\n [2025-09-08 07:10:17][359118663722707][870 ms][DEBUG] check_internet: online [2025-09-08 07:10:17][359118663722707][870 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:10:17][359118663722707][870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359118663722707\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3519\"}'\'' -e'"" [2025-09-08 07:10:17][359118663722707][870 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:10:17][359118663722707][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359118663722707\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3519\"}'\'' -e'"" [2025-09-08 07:10:24][359118663722707][7275 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae1a929f-cd8f-4a5b-9975-f024a7931b12","id":"QR_ae1a929f-cd8f-4a5b-9975-f024a7931b12","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:10:24][359118663722707][7431 ms][DEBUG] proc_open done in 6560 ms; code=255; res.len=3343 [2025-09-08 07:10:24][359118663722707][7431 ms][DEBUG] END runCmdUntilRes#1 in 6560 ms [2025-09-08 07:10:24][359118663722707][7431 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:12:03][356647184693214][1 ms][INFO] === Request start === [2025-09-08 07:12:03][356647184693214][1 ms][DEBUG] START check_scloud [2025-09-08 07:12:03][356647184693214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:12:03][356647184693214][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 30612 27480 23671316 60192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:12:03][356647184693214][292 ms][DEBUG] targetPkg: running [2025-09-08 07:12:03][356647184693214][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-08 07:12:03][356647184693214][292 ms][DEBUG] START check_boot_completed [2025-09-08 07:12:03][356647184693214][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:12:03][356647184693214][339 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:12:03][356647184693214][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:12:03][356647184693214][401 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 07:12:03][356647184693214][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:12:03][356647184693214][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:12:03][356647184693214][543 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 819\nsuccessfulTxPacketsPerSecond: 7.107049841950555\nretriedTxPackets: 141\nretriedTxPacketsPerSecond: 2.025824402769646\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 877\nsuccessfulRxPacketsPerSecond: 6.038970055060869\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:12:03][356647184693214][543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:12:04][356647184693214][854 ms][DEBUG] SU: done in 311 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.697/200.697/200.697/0.000 ms\n [2025-09-08 07:12:04][356647184693214][854 ms][DEBUG] check_internet: online [2025-09-08 07:12:04][356647184693214][854 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:12:04][356647184693214][854 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356647184693214\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7940\"}'\'' -e'"" [2025-09-08 07:12:04][356647184693214][854 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:12:04][356647184693214][854 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356647184693214\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7940\"}'\'' -e'"" [2025-09-08 07:12:09][356647184693214][6650 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7dd72327-a024-4ed5-b19d-fc0b82cb0fce","id":"QR_7dd72327-a024-4ed5-b19d-fc0b82cb0fce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:12:10][356647184693214][6806 ms][DEBUG] proc_open done in 5951 ms; code=255; res.len=3343 [2025-09-08 07:12:10][356647184693214][6806 ms][DEBUG] END runCmdUntilRes#1 in 5952 ms [2025-09-08 07:12:10][356647184693214][6806 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:12:38][351376414265206][0 ms][INFO] === Request start === [2025-09-08 07:12:38][351376414265206][1 ms][DEBUG] START check_scloud [2025-09-08 07:12:38][351376414265206][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:12:38][351376414265206][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 30612 27480 23787948 76124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:12:38][351376414265206][287 ms][DEBUG] targetPkg: running [2025-09-08 07:12:38][351376414265206][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-08 07:12:38][351376414265206][287 ms][DEBUG] START check_boot_completed [2025-09-08 07:12:38][351376414265206][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:12:38][351376414265206][318 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 07:12:38][351376414265206][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:12:38][351376414265206][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:12:38][351376414265206][365 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 07:12:38][351376414265206][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:12:38][351376414265206][476 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 819\nsuccessfulTxPacketsPerSecond: 7.107049841950555\nretriedTxPackets: 141\nretriedTxPacketsPerSecond: 2.025824402769646\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 877\nsuccessfulRxPacketsPerSecond: 6.038970055060869\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:12:38][351376414265206][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:12:39][351376414265206][803 ms][DEBUG] SU: done in 327 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.574/205.574/205.574/0.000 ms\n [2025-09-08 07:12:39][351376414265206][803 ms][DEBUG] check_internet: online [2025-09-08 07:12:39][351376414265206][803 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:12:39][351376414265206][803 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351376414265206\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4403\"}'\'' -e'"" [2025-09-08 07:12:39][351376414265206][803 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:12:39][351376414265206][803 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351376414265206\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4403\"}'\'' -e'"" [2025-09-08 07:12:42][351376414265206][4052 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 07:12:42][351376414265206][4208 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=107 [2025-09-08 07:12:42][351376414265206][4208 ms][DEBUG] END runCmdUntilRes#1 in 3405 ms [2025-09-08 07:12:42][351376414265206][4208 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 07:12:42][][0 ms][INFO] === Request start === [2025-09-08 07:12:42][][1 ms][DEBUG] START check_scloud [2025-09-08 07:12:42][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:12:43][][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 30612 27480 23950772 92760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:12:43][][333 ms][DEBUG] targetPkg: running [2025-09-08 07:12:43][][333 ms][DEBUG] END check_scloud in 332 ms [2025-09-08 07:12:43][][333 ms][DEBUG] START check_boot_completed [2025-09-08 07:12:43][][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:12:43][][379 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:12:43][][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:12:43][][426 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:12:43][][426 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 07:12:43][][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:12:43][][567 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 819\nsuccessfulTxPacketsPerSecond: 7.107049841950555\nretriedTxPackets: 141\nretriedTxPacketsPerSecond: 2.025824402769646\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 877\nsuccessfulRxPacketsPerSecond: 6.038970055060869\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:12:43][][567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:12:43][][848 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.000/164.000/164.000/0.000 ms\n [2025-09-08 07:12:43][][848 ms][DEBUG] check_internet: online [2025-09-08 07:12:43][][848 ms][DEBUG] rawBody.length=1131 [2025-09-08 07:12:43][][848 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CR306C4PJ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4372\"}'\'' -e'"" [2025-09-08 07:12:43][][848 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:12:43][][848 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CR306C4PJ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4372\"}'\'' -e'"" [2025-09-08 07:12:46][][3910 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-08 07:12:46][][4066 ms][DEBUG] proc_open done in 3218 ms; code=255; res.len=95 [2025-09-08 07:12:46][][4066 ms][DEBUG] END runCmdUntilRes#1 in 3218 ms [2025-09-08 07:12:46][][4066 ms][INFO] SUCCESS response from frida (len=95) [2025-09-08 07:12:48][351376414265206][0 ms][INFO] === Request start === [2025-09-08 07:12:48][351376414265206][1 ms][DEBUG] START check_scloud [2025-09-08 07:12:48][351376414265206][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:12:48][351376414265206][264 ms][DEBUG] SU: done in 264 ms; outu0_a118 30612 27480 24119728 108276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:12:48][351376414265206][264 ms][DEBUG] targetPkg: running [2025-09-08 07:12:48][351376414265206][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-08 07:12:48][351376414265206][265 ms][DEBUG] START check_boot_completed [2025-09-08 07:12:48][351376414265206][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:12:48][351376414265206][311 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:12:48][351376414265206][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:12:48][351376414265206][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:12:48][351376414265206][358 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 07:12:48][351376414265206][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:12:48][351376414265206][485 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 819\nsuccessfulTxPacketsPerSecond: 7.107049841950555\nretriedTxPackets: 141\nretriedTxPacketsPerSecond: 2.025824402769646\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 877\nsuccessfulRxPacketsPerSecond: 6.038970055060869\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:12:48][351376414265206][485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:12:49][351376414265206][874 ms][DEBUG] SU: done in 389 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=275 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 275.777/275.777/275.777/0.000 ms\n [2025-09-08 07:12:49][351376414265206][874 ms][DEBUG] check_internet: online [2025-09-08 07:12:49][351376414265206][874 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:12:49][351376414265206][874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351376414265206\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9343\"}'\'' -e'"" [2025-09-08 07:12:49][351376414265206][874 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:12:49][351376414265206][874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351376414265206\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9343\"}'\'' -e'"" [2025-09-08 07:12:55][351376414265206][6747 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8c83be1-e565-42a8-96d2-7250f831fac8","id":"QR_e8c83be1-e565-42a8-96d2-7250f831fac8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:12:55][351376414265206][6903 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-09-08 07:12:55][351376414265206][6903 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-09-08 07:12:55][351376414265206][6903 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:13:04][350361082877889][0 ms][INFO] === Request start === [2025-09-08 07:13:04][350361082877889][1 ms][DEBUG] START check_scloud [2025-09-08 07:13:04][350361082877889][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:13:04][350361082877889][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 30612 27480 24268400 120288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:13:04][350361082877889][316 ms][DEBUG] targetPkg: running [2025-09-08 07:13:04][350361082877889][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 07:13:04][350361082877889][316 ms][DEBUG] START check_boot_completed [2025-09-08 07:13:04][350361082877889][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:13:04][350361082877889][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 07:13:04][350361082877889][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:13:04][350361082877889][409 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 07:13:04][350361082877889][410 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 07:13:04][350361082877889][410 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:13:04][350361082877889][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361082877889\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8671\"}'\'' -e'"" [2025-09-08 07:13:04][350361082877889][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:13:04][350361082877889][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361082877889\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8671\"}'\'' -e'"" [2025-09-08 07:13:08][350361082877889][4268 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1bb6a18e-503f-49c6-ba38-bd8a14392d3c","id":"QR_1bb6a18e-503f-49c6-ba38-bd8a14392d3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:13:08][350361082877889][4424 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-09-08 07:13:08][350361082877889][4424 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-09-08 07:13:08][350361082877889][4424 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:13:10][350361082877889][0 ms][INFO] === Request start === [2025-09-08 07:13:10][350361082877889][1 ms][DEBUG] START check_scloud [2025-09-08 07:13:10][350361082877889][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:13:11][350361082877889][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 30612 27480 24408788 132208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:13:11][350361082877889][317 ms][DEBUG] targetPkg: running [2025-09-08 07:13:11][350361082877889][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 07:13:11][350361082877889][317 ms][DEBUG] START check_boot_completed [2025-09-08 07:13:11][350361082877889][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:13:11][350361082877889][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:13:11][350361082877889][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:13:11][350361082877889][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 07:13:11][350361082877889][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:13:11][350361082877889][426 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:13:11][350361082877889][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361082877889\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8900\"}'\'' -e'"" [2025-09-08 07:13:11][350361082877889][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:13:11][350361082877889][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361082877889\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8900\"}'\'' -e'"" [2025-09-08 07:13:16][350361082877889][5378 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41b0f485-11be-4300-b80a-72f827132f64","id":"QR_41b0f485-11be-4300-b80a-72f827132f64","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:13:16][350361082877889][5534 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-08 07:13:16][350361082877889][5534 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-08 07:13:16][350361082877889][5534 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:21:04][351550588025220][1 ms][INFO] === Request start === [2025-09-08 07:21:04][351550588025220][1 ms][DEBUG] START check_scloud [2025-09-08 07:21:04][351550588025220][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:21:04][351550588025220][255 ms][DEBUG] SU: done in 253 ms; outu0_a118 30612 27480 24523464 143532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:21:04][351550588025220][255 ms][DEBUG] targetPkg: running [2025-09-08 07:21:04][351550588025220][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-08 07:21:04][351550588025220][255 ms][DEBUG] START check_boot_completed [2025-09-08 07:21:04][351550588025220][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:21:04][351550588025220][302 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:21:04][351550588025220][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:21:04][351550588025220][364 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 07:21:04][351550588025220][364 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:21:04][351550588025220][364 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:21:04][351550588025220][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351550588025220\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4377\"}'\'' -e'"" [2025-09-08 07:21:04][351550588025220][364 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:21:04][351550588025220][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351550588025220\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4377\"}'\'' -e'"" [2025-09-08 07:21:08][351550588025220][4800 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0959bda1-f366-423a-93dc-5653ad30ab7e","id":"QR_0959bda1-f366-423a-93dc-5653ad30ab7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:21:09][351550588025220][4956 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-08 07:21:09][351550588025220][4957 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-09-08 07:21:09][351550588025220][4957 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:21:11][353718682957436][0 ms][INFO] === Request start === [2025-09-08 07:21:11][353718682957436][1 ms][DEBUG] START check_scloud [2025-09-08 07:21:11][353718682957436][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:21:11][353718682957436][279 ms][DEBUG] SU: done in 279 ms; outu0_a118 30612 27480 24667228 154296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:21:11][353718682957436][279 ms][DEBUG] targetPkg: running [2025-09-08 07:21:11][353718682957436][279 ms][DEBUG] END check_scloud in 279 ms [2025-09-08 07:21:11][353718682957436][280 ms][DEBUG] START check_boot_completed [2025-09-08 07:21:11][353718682957436][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:21:11][353718682957436][326 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:21:11][353718682957436][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:21:11][353718682957436][374 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 07:21:11][353718682957436][374 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 07:21:11][353718682957436][374 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:21:11][353718682957436][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353718682957436\",\"model\":\"SM-G990B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9824\"}'\'' -e'"" [2025-09-08 07:21:11][353718682957436][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:21:11][353718682957436][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353718682957436\",\"model\":\"SM-G990B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9824\"}'\'' -e'"" [2025-09-08 07:21:14][353718682957436][3825 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27fbb93e-7f5e-45de-ad7e-e454f8be2d12","id":"QR_27fbb93e-7f5e-45de-ad7e-e454f8be2d12","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:21:15][353718682957436][3981 ms][DEBUG] proc_open done in 3607 ms; code=255; res.len=3343 [2025-09-08 07:21:15][353718682957436][3981 ms][DEBUG] END runCmdUntilRes#1 in 3607 ms [2025-09-08 07:21:15][353718682957436][3981 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:21:17][353718682957436][0 ms][INFO] === Request start === [2025-09-08 07:21:17][353718682957436][1 ms][DEBUG] START check_scloud [2025-09-08 07:21:17][353718682957436][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:21:17][353718682957436][320 ms][DEBUG] SU: done in 320 ms; outu0_a118 30612 27480 24832168 165972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:21:17][353718682957436][320 ms][DEBUG] targetPkg: running [2025-09-08 07:21:17][353718682957436][320 ms][DEBUG] END check_scloud in 320 ms [2025-09-08 07:21:17][353718682957436][321 ms][DEBUG] START check_boot_completed [2025-09-08 07:21:17][353718682957436][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:21:17][353718682957436][349 ms][DEBUG] ADB: done in 29 ms; out [2025-09-08 07:21:17][353718682957436][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:21:17][353718682957436][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:21:17][353718682957436][396 ms][DEBUG] END check_boot_completed in 76 ms [2025-09-08 07:21:17][353718682957436][396 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:21:17][353718682957436][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353718682957436\",\"model\":\"SM-G990B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6151\"}'\'' -e'"" [2025-09-08 07:21:17][353718682957436][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:21:17][353718682957436][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353718682957436\",\"model\":\"SM-G990B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6151\"}'\'' -e'"" [2025-09-08 07:21:23][353718682957436][5489 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f71b39bb-4815-40dc-8b4e-cf6c4ac70241","id":"QR_f71b39bb-4815-40dc-8b4e-cf6c4ac70241","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:21:23][353718682957436][5645 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-09-08 07:21:23][353718682957436][5645 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-09-08 07:21:23][353718682957436][5645 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:22:03][354068191113959][0 ms][INFO] === Request start === [2025-09-08 07:22:03][354068191113959][1 ms][DEBUG] START check_scloud [2025-09-08 07:22:03][354068191113959][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:22:03][354068191113959][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 30612 27480 24905028 177460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:22:03][354068191113959][304 ms][DEBUG] targetPkg: running [2025-09-08 07:22:03][354068191113959][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 07:22:03][354068191113959][304 ms][DEBUG] START check_boot_completed [2025-09-08 07:22:03][354068191113959][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:22:03][354068191113959][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:22:03][354068191113959][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:22:04][354068191113959][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:22:04][354068191113959][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 07:22:04][354068191113959][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:22:04][354068191113959][507 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1229\nsuccessfulTxPacketsPerSecond: 0.33889632762636346\nretriedTxPackets: 250\nretriedTxPacketsPerSecond: 0.11296544254212115\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1232\nsuccessfulRxPacketsPerSecond: 0.2757685803234134\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:22:04][354068191113959][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:22:05][354068191113959][1772 ms][DEBUG] SU: done in 1265 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.948/228.948/228.948/0.000 ms\n [2025-09-08 07:22:05][354068191113959][1772 ms][DEBUG] check_internet: online [2025-09-08 07:22:05][354068191113959][1772 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:22:05][354068191113959][1773 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191113959\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7379\"}'\'' -e'"" [2025-09-08 07:22:05][354068191113959][1773 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:22:05][354068191113959][1773 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191113959\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7379\"}'\'' -e'"" [2025-09-08 07:22:09][354068191113959][5974 ms][DEBUG] proc_open done in 4201 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 07:22:09][354068191113959][5974 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-08 07:22:09][354068191113959][5974 ms][WARN] Detected error: Process with pid 30612 either refused to load frida-agent, or terminated during injectionProcess with pid 30612 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 07:22:09][354068191113959][5974 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 07:22:09][354068191113959][6271 ms][DEBUG] SU: done in 297 ms; outsystem 27820 27480 12565964 240516 ep_poll 0 S system_server\n [2025-09-08 07:22:09][354068191113959][6271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 07:22:10][354068191113959][6427 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 07:22:10][354068191113959][6428 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 07:22:10][354068191113959][6428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 07:22:10][354068191113959][6584 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 07:22:10][354068191113959][6584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 07:22:10][354068191113959][6787 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 07:22:12][354068191113959][8802 ms][DEBUG] START check_boot_completed [2025-09-08 07:22:12][354068191113959][8802 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:22:12][354068191113959][8849 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:22:12][354068191113959][8849 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:22:12][354068191113959][8897 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 07:22:12][354068191113959][8897 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 07:22:15][354068191113959][11910 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 07:22:15][354068191113959][11910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191113959\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7379\"}'\'' -e'"" [2025-09-08 07:22:19][354068191113959][15909 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9236859d-0b2b-42db-9a15-33c31cae0a10","id":"QR_9236859d-0b2b-42db-9a15-33c31cae0a10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:22:19][354068191113959][16066 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-09-08 07:22:19][354068191113959][16066 ms][DEBUG] END runCmdUntilRes#2 in 4155 ms [2025-09-08 07:22:19][354068191113959][16066 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:22:22][354068191113959][0 ms][INFO] === Request start === [2025-09-08 07:22:22][354068191113959][1 ms][DEBUG] START check_scloud [2025-09-08 07:22:22][354068191113959][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:22:22][354068191113959][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 8901 27480 23568356 123652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:22:22][354068191113959][281 ms][DEBUG] targetPkg: running [2025-09-08 07:22:22][354068191113959][281 ms][DEBUG] END check_scloud in 280 ms [2025-09-08 07:22:22][354068191113959][281 ms][DEBUG] START check_boot_completed [2025-09-08 07:22:22][354068191113959][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:22:22][354068191113959][327 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:22:22][354068191113959][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:22:22][354068191113959][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:22:22][354068191113959][374 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 07:22:22][354068191113959][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:22:22][354068191113959][468 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1229\nsuccessfulTxPacketsPerSecond: 0.33889632762636346\nretriedTxPackets: 250\nretriedTxPacketsPerSecond: 0.11296544254212115\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1232\nsuccessfulRxPacketsPerSecond: 0.2757685803234134\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:22:22][354068191113959][468 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:22:22][354068191113959][796 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.435/223.435/223.435/0.000 ms\n [2025-09-08 07:22:22][354068191113959][796 ms][DEBUG] check_internet: online [2025-09-08 07:22:22][354068191113959][796 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:22:22][354068191113959][796 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191113959\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5380\"}'\'' -e'"" [2025-09-08 07:22:22][354068191113959][796 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:22:22][354068191113959][796 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191113959\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5380\"}'\'' -e'"" [2025-09-08 07:22:27][354068191113959][5935 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_033ef949-2221-4598-94e8-453d7e1f3dd2","id":"QR_033ef949-2221-4598-94e8-453d7e1f3dd2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:22:28][354068191113959][6092 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 07:22:28][354068191113959][6092 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 07:22:28][354068191113959][6092 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:22:32][351877477932434][0 ms][INFO] === Request start === [2025-09-08 07:22:32][351877477932434][1 ms][DEBUG] START check_scloud [2025-09-08 07:22:32][351877477932434][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:22:32][351877477932434][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 8901 27480 23755000 136744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:22:32][351877477932434][299 ms][DEBUG] targetPkg: running [2025-09-08 07:22:32][351877477932434][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 07:22:32][351877477932434][299 ms][DEBUG] START check_boot_completed [2025-09-08 07:22:32][351877477932434][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:22:32][351877477932434][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:22:32][351877477932434][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:22:32][351877477932434][408 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 07:22:32][351877477932434][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:22:32][351877477932434][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:22:32][351877477932434][549 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1229\nsuccessfulTxPacketsPerSecond: 0.33889632762636346\nretriedTxPackets: 250\nretriedTxPacketsPerSecond: 0.11296544254212115\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1232\nsuccessfulRxPacketsPerSecond: 0.2757685803234134\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:22:32][351877477932434][549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:22:33][351877477932434][846 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.364/186.364/186.364/0.000 ms\n [2025-09-08 07:22:33][351877477932434][846 ms][DEBUG] check_internet: online [2025-09-08 07:22:33][351877477932434][846 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:22:33][351877477932434][846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477932434\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5043\"}'\'' -e'"" [2025-09-08 07:22:33][351877477932434][846 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:22:33][351877477932434][846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477932434\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5043\"}'\'' -e'"" [2025-09-08 07:22:36][351877477932434][4110 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1d83b11-6800-49e1-ba26-354603371bfe","id":"QR_b1d83b11-6800-49e1-ba26-354603371bfe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:22:36][351877477932434][4267 ms][DEBUG] proc_open done in 3420 ms; code=255; res.len=3343 [2025-09-08 07:22:36][351877477932434][4267 ms][DEBUG] END runCmdUntilRes#1 in 3421 ms [2025-09-08 07:22:36][351877477932434][4267 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:22:38][351877477932434][0 ms][INFO] === Request start === [2025-09-08 07:22:38][351877477932434][1 ms][DEBUG] START check_scloud [2025-09-08 07:22:38][351877477932434][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:22:39][351877477932434][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 8901 27480 23868828 148296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:22:39][351877477932434][260 ms][DEBUG] targetPkg: running [2025-09-08 07:22:39][351877477932434][260 ms][DEBUG] END check_scloud in 260 ms [2025-09-08 07:22:39][351877477932434][260 ms][DEBUG] START check_boot_completed [2025-09-08 07:22:39][351877477932434][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:22:39][351877477932434][307 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:22:39][351877477932434][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:22:39][351877477932434][370 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 07:22:39][351877477932434][370 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:22:39][351877477932434][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:22:39][351877477932434][495 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1229\nsuccessfulTxPacketsPerSecond: 0.33889632762636346\nretriedTxPackets: 250\nretriedTxPacketsPerSecond: 0.11296544254212115\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1232\nsuccessfulRxPacketsPerSecond: 0.2757685803234134\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:22:39][351877477932434][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:22:39][351877477932434][760 ms][DEBUG] SU: done in 265 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.998/163.998/163.998/0.000 ms\n [2025-09-08 07:22:39][351877477932434][760 ms][DEBUG] check_internet: online [2025-09-08 07:22:39][351877477932434][760 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:22:39][351877477932434][761 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477932434\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7131\"}'\'' -e'"" [2025-09-08 07:22:39][351877477932434][761 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:22:39][351877477932434][761 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477932434\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7131\"}'\'' -e'"" [2025-09-08 07:22:44][351877477932434][5306 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dbd7c152-59b3-4a73-b75c-f8cc8ef39c48","id":"QR_dbd7c152-59b3-4a73-b75c-f8cc8ef39c48","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:22:44][351877477932434][5462 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-08 07:22:44][351877477932434][5462 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-09-08 07:22:44][351877477932434][5462 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:25:03][350929871262750][1 ms][INFO] === Request start === [2025-09-08 07:25:03][350929871262750][1 ms][DEBUG] START check_scloud [2025-09-08 07:25:03][350929871262750][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:25:03][350929871262750][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 8901 27480 23860284 160072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:25:03][350929871262750][292 ms][DEBUG] targetPkg: running [2025-09-08 07:25:03][350929871262750][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-08 07:25:03][350929871262750][292 ms][DEBUG] START check_boot_completed [2025-09-08 07:25:03][350929871262750][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:25:03][350929871262750][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 07:25:03][350929871262750][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:25:03][350929871262750][386 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 07:25:03][350929871262750][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 07:25:03][350929871262750][386 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:25:03][350929871262750][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350929871262750\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6605\"}'\'' -e'"" [2025-09-08 07:25:03][350929871262750][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:25:03][350929871262750][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350929871262750\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6605\"}'\'' -e'"" [2025-09-08 07:25:09][350929871262750][5853 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9d35bb0-18b3-424e-8f83-ba3cdfb25f68","id":"QR_c9d35bb0-18b3-424e-8f83-ba3cdfb25f68","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:25:09][350929871262750][6009 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-09-08 07:25:09][350929871262750][6009 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-09-08 07:25:09][350929871262750][6009 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:25:11][350929871262750][0 ms][INFO] === Request start === [2025-09-08 07:25:11][350929871262750][1 ms][DEBUG] START check_scloud [2025-09-08 07:25:11][350929871262750][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:25:11][350929871262750][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 8901 27480 24033604 170928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:25:11][350929871262750][266 ms][DEBUG] targetPkg: running [2025-09-08 07:25:11][350929871262750][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-08 07:25:11][350929871262750][266 ms][DEBUG] START check_boot_completed [2025-09-08 07:25:11][350929871262750][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:25:11][350929871262750][313 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:25:11][350929871262750][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:25:11][350929871262750][375 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 07:25:11][350929871262750][375 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:25:11][350929871262750][375 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:25:11][350929871262750][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350929871262750\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1782\"}'\'' -e'"" [2025-09-08 07:25:11][350929871262750][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:25:11][350929871262750][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350929871262750\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1782\"}'\'' -e'"" [2025-09-08 07:25:17][350929871262750][5499 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f49346f4-5760-4146-abb1-ed23ca5f3118","id":"QR_f49346f4-5760-4146-abb1-ed23ca5f3118","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:25:17][350929871262750][5655 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-09-08 07:25:17][350929871262750][5655 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-09-08 07:25:17][350929871262750][5655 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:26:04][352609762177683][0 ms][INFO] === Request start === [2025-09-08 07:26:04][352609762177683][1 ms][DEBUG] START check_scloud [2025-09-08 07:26:04][352609762177683][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:26:05][352609762177683][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 8901 27480 24180228 183056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:26:05][352609762177683][304 ms][DEBUG] targetPkg: running [2025-09-08 07:26:05][352609762177683][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 07:26:05][352609762177683][304 ms][DEBUG] START check_boot_completed [2025-09-08 07:26:05][352609762177683][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:26:05][352609762177683][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:26:05][352609762177683][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:26:05][352609762177683][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 07:26:05][352609762177683][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:26:05][352609762177683][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:26:05][352609762177683][523 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1441\nsuccessfulTxPacketsPerSecond: 0.7040850215875124\nretriedTxPackets: 307\nretriedTxPacketsPerSecond: 0.1893058784456991\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1420\nsuccessfulRxPacketsPerSecond: 0.6243772832945865\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:26:05][352609762177683][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:26:05][352609762177683][851 ms][DEBUG] SU: done in 327 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=240 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 240.582/240.582/240.582/0.000 ms\n [2025-09-08 07:26:05][352609762177683][851 ms][DEBUG] check_internet: online [2025-09-08 07:26:05][352609762177683][851 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:26:05][352609762177683][851 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352609762177683\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CCT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2309\"}'\'' -e'"" [2025-09-08 07:26:05][352609762177683][851 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:26:05][352609762177683][851 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352609762177683\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CCT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2309\"}'\'' -e'"" [2025-09-08 07:26:10][352609762177683][5506 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8bdf0194-3d68-4aac-8e88-dc98c9a99d45","id":"QR_8bdf0194-3d68-4aac-8e88-dc98c9a99d45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:26:10][352609762177683][5662 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-08 07:26:10][352609762177683][5662 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-08 07:26:10][352609762177683][5662 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:26:14][352609762177683][0 ms][INFO] === Request start === [2025-09-08 07:26:14][352609762177683][1 ms][DEBUG] START check_scloud [2025-09-08 07:26:14][352609762177683][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:26:14][352609762177683][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 8901 27480 24351500 193340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:26:14][352609762177683][311 ms][DEBUG] targetPkg: running [2025-09-08 07:26:14][352609762177683][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 07:26:14][352609762177683][311 ms][DEBUG] START check_boot_completed [2025-09-08 07:26:14][352609762177683][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:26:14][352609762177683][356 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 07:26:14][352609762177683][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:26:14][352609762177683][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 07:26:14][352609762177683][418 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 07:26:14][352609762177683][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:26:14][352609762177683][543 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1441\nsuccessfulTxPacketsPerSecond: 0.7040850215875124\nretriedTxPackets: 307\nretriedTxPacketsPerSecond: 0.1893058784456991\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1420\nsuccessfulRxPacketsPerSecond: 0.6243772832945865\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:26:14][352609762177683][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:26:14][352609762177683][918 ms][DEBUG] SU: done in 374 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.362/247.362/247.362/0.000 ms\n [2025-09-08 07:26:14][352609762177683][918 ms][DEBUG] check_internet: online [2025-09-08 07:26:14][352609762177683][918 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:26:14][352609762177683][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352609762177683\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CCT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6235\"}'\'' -e'"" [2025-09-08 07:26:14][352609762177683][918 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:26:14][352609762177683][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352609762177683\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CCT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6235\"}'\'' -e'"" [2025-09-08 07:26:19][352609762177683][5261 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a5bdb4f-6d66-495d-991d-242e4cc2a221","id":"QR_0a5bdb4f-6d66-495d-991d-242e4cc2a221","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:26:19][352609762177683][5417 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-09-08 07:26:19][352609762177683][5417 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-09-08 07:26:19][352609762177683][5417 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:29:03][350178738666148][1 ms][INFO] === Request start === [2025-09-08 07:29:03][350178738666148][1 ms][DEBUG] START check_scloud [2025-09-08 07:29:03][350178738666148][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:29:04][350178738666148][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 8901 27480 24470376 206136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:29:04][350178738666148][261 ms][DEBUG] targetPkg: running [2025-09-08 07:29:04][350178738666148][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-08 07:29:04][350178738666148][261 ms][DEBUG] START check_boot_completed [2025-09-08 07:29:04][350178738666148][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:29:04][350178738666148][292 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 07:29:04][350178738666148][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:29:04][350178738666148][339 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:29:04][350178738666148][339 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 07:29:04][350178738666148][340 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:29:04][350178738666148][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178738666148\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5823\"}'\'' -e'"" [2025-09-08 07:29:04][350178738666148][340 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:29:04][350178738666148][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178738666148\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5823\"}'\'' -e'"" [2025-09-08 07:29:09][350178738666148][5416 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e612fdbe-303d-403a-8caa-b99d976637c9","id":"QR_e612fdbe-303d-403a-8caa-b99d976637c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:29:09][350178738666148][5572 ms][DEBUG] proc_open done in 5232 ms; code=255; res.len=3343 [2025-09-08 07:29:09][350178738666148][5572 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-08 07:29:09][350178738666148][5573 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:29:11][350178738666148][0 ms][INFO] === Request start === [2025-09-08 07:29:11][350178738666148][1 ms][DEBUG] START check_scloud [2025-09-08 07:29:11][350178738666148][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:29:11][350178738666148][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 8901 27480 24648688 216776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:29:11][350178738666148][310 ms][DEBUG] targetPkg: running [2025-09-08 07:29:11][350178738666148][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 07:29:11][350178738666148][310 ms][DEBUG] START check_boot_completed [2025-09-08 07:29:11][350178738666148][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:29:12][350178738666148][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:29:12][350178738666148][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:29:12][350178738666148][419 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 07:29:12][350178738666148][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:29:12][350178738666148][419 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:29:12][350178738666148][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178738666148\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4515\"}'\'' -e'"" [2025-09-08 07:29:12][350178738666148][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:29:12][350178738666148][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178738666148\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4515\"}'\'' -e'"" [2025-09-08 07:29:16][350178738666148][5277 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e23876e-6c94-4dd2-8b42-acca3a6b38f9","id":"QR_7e23876e-6c94-4dd2-8b42-acca3a6b38f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:29:17][350178738666148][5433 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-08 07:29:17][350178738666148][5434 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-08 07:29:17][350178738666148][5434 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:35:03][353684142172588][1 ms][INFO] === Request start === [2025-09-08 07:35:03][353684142172588][1 ms][DEBUG] START check_scloud [2025-09-08 07:35:03][353684142172588][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:35:04][353684142172588][253 ms][DEBUG] SU: done in 251 ms; outu0_a118 8901 27480 24780976 229068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:35:04][353684142172588][253 ms][DEBUG] targetPkg: running [2025-09-08 07:35:04][353684142172588][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-08 07:35:04][353684142172588][253 ms][DEBUG] START check_boot_completed [2025-09-08 07:35:04][353684142172588][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:35:04][353684142172588][284 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 07:35:04][353684142172588][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:35:04][353684142172588][331 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:35:04][353684142172588][331 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 07:35:04][353684142172588][331 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:35:04][353684142172588][331 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142172588\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5770\"}'\'' -e'"" [2025-09-08 07:35:04][353684142172588][331 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:35:04][353684142172588][331 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142172588\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5770\"}'\'' -e'"" [2025-09-08 07:35:09][353684142172588][5204 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_86d854b8-8762-428e-8f79-1fa76409aa93","id":"QR_86d854b8-8762-428e-8f79-1fa76409aa93","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:35:09][353684142172588][5361 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-08 07:35:09][353684142172588][5361 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-08 07:35:09][353684142172588][5361 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:35:11][353684142172588][0 ms][INFO] === Request start === [2025-09-08 07:35:11][353684142172588][1 ms][DEBUG] START check_scloud [2025-09-08 07:35:11][353684142172588][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:35:11][353684142172588][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 8901 27480 24911160 234112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:35:11][353684142172588][258 ms][DEBUG] targetPkg: running [2025-09-08 07:35:11][353684142172588][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-08 07:35:11][353684142172588][258 ms][DEBUG] START check_boot_completed [2025-09-08 07:35:11][353684142172588][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:35:11][353684142172588][305 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:35:11][353684142172588][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:35:11][353684142172588][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:35:11][353684142172588][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 07:35:11][353684142172588][351 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:35:11][353684142172588][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142172588\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3326\"}'\'' -e'"" [2025-09-08 07:35:11][353684142172588][351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:35:11][353684142172588][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142172588\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3326\"}'\'' -e'"" [2025-09-08 07:35:15][353684142172588][4194 ms][DEBUG] proc_open done in 3843 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 07:35:15][353684142172588][4194 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-09-08 07:35:15][353684142172588][4194 ms][WARN] Detected error: Process with pid 8901 either refused to load frida-agent, or terminated during injectionProcess with pid 8901 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 07:35:15][353684142172588][4194 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 07:35:16][353684142172588][4491 ms][DEBUG] SU: done in 297 ms; outsystem 27820 27480 12686968 232652 ep_poll 0 S system_server\n [2025-09-08 07:35:16][353684142172588][4491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 07:35:16][353684142172588][4632 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 07:35:16][353684142172588][4632 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 07:35:16][353684142172588][4632 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 07:35:16][353684142172588][4757 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 07:35:16][353684142172588][4757 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 07:35:16][353684142172588][4960 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 07:35:18][353684142172588][6975 ms][DEBUG] START check_boot_completed [2025-09-08 07:35:18][353684142172588][6975 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:35:18][353684142172588][7022 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:35:18][353684142172588][7022 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:35:18][353684142172588][7084 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 07:35:18][353684142172588][7085 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 07:35:21][353684142172588][10099 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 07:35:21][353684142172588][10099 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142172588\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3326\"}'\'' -e'"" [2025-09-08 07:35:26][353684142172588][15426 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9903211-753f-464f-9d0d-5ffcfdb9ba36","id":"QR_d9903211-753f-464f-9d0d-5ffcfdb9ba36","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:35:27][353684142172588][15582 ms][DEBUG] proc_open done in 5483 ms; code=255; res.len=3343 [2025-09-08 07:35:27][353684142172588][15582 ms][DEBUG] END runCmdUntilRes#2 in 5483 ms [2025-09-08 07:35:27][353684142172588][15582 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:37:03][351600130902838][0 ms][INFO] === Request start === [2025-09-08 07:37:03][351600130902838][1 ms][DEBUG] START check_scloud [2025-09-08 07:37:03][351600130902838][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:37:04][351600130902838][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 10426 27480 23489560 127292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:37:04][351600130902838][315 ms][DEBUG] targetPkg: running [2025-09-08 07:37:04][351600130902838][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 07:37:04][351600130902838][316 ms][DEBUG] START check_boot_completed [2025-09-08 07:37:04][351600130902838][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:37:04][351600130902838][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:37:04][351600130902838][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:37:04][351600130902838][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:37:04][351600130902838][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 07:37:04][351600130902838][409 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:37:04][351600130902838][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351600130902838\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6921\"}'\'' -e'"" [2025-09-08 07:37:04][351600130902838][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:37:04][351600130902838][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351600130902838\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6921\"}'\'' -e'"" [2025-09-08 07:37:09][351600130902838][5158 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df8a0661-5434-4be1-8faa-37ac0c48342d","id":"QR_df8a0661-5434-4be1-8faa-37ac0c48342d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:37:09][351600130902838][5314 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-08 07:37:09][351600130902838][5314 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-08 07:37:09][351600130902838][5314 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:37:11][351600130902838][1 ms][INFO] === Request start === [2025-09-08 07:37:11][351600130902838][1 ms][DEBUG] START check_scloud [2025-09-08 07:37:11][351600130902838][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:37:11][351600130902838][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 10426 27480 23668832 137960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:37:11][351600130902838][280 ms][DEBUG] targetPkg: running [2025-09-08 07:37:11][351600130902838][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-08 07:37:11][351600130902838][280 ms][DEBUG] START check_boot_completed [2025-09-08 07:37:11][351600130902838][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:37:11][351600130902838][327 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 07:37:11][351600130902838][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:37:11][351600130902838][389 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 07:37:11][351600130902838][389 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:37:11][351600130902838][389 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:37:11][351600130902838][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351600130902838\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1973\"}'\'' -e'"" [2025-09-08 07:37:11][351600130902838][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:37:11][351600130902838][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351600130902838\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1973\"}'\'' -e'"" [2025-09-08 07:37:17][351600130902838][5731 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c67ee63a-e379-47b8-a997-1a4dea5ddada","id":"QR_c67ee63a-e379-47b8-a997-1a4dea5ddada","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:37:17][351600130902838][5888 ms][DEBUG] proc_open done in 5499 ms; code=255; res.len=3343 [2025-09-08 07:37:17][351600130902838][5888 ms][DEBUG] END runCmdUntilRes#1 in 5499 ms [2025-09-08 07:37:17][351600130902838][5888 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:37:21][350178734261035][0 ms][INFO] === Request start === [2025-09-08 07:37:21][350178734261035][1 ms][DEBUG] START check_scloud [2025-09-08 07:37:21][350178734261035][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:37:21][350178734261035][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 10426 27480 23800924 149560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:37:21][350178734261035][322 ms][DEBUG] targetPkg: running [2025-09-08 07:37:21][350178734261035][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-08 07:37:21][350178734261035][322 ms][DEBUG] START check_boot_completed [2025-09-08 07:37:21][350178734261035][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:37:21][350178734261035][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:37:21][350178734261035][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:37:21][350178734261035][431 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 07:37:21][350178734261035][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 07:37:21][350178734261035][431 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:37:21][350178734261035][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178734261035\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2258\"}'\'' -e'"" [2025-09-08 07:37:21][350178734261035][431 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:37:21][350178734261035][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178734261035\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2258\"}'\'' -e'"" [2025-09-08 07:37:25][350178734261035][4024 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9d274b9-7a85-462d-b5bc-431c333d8e0f","id":"QR_a9d274b9-7a85-462d-b5bc-431c333d8e0f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:37:25][350178734261035][4180 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-09-08 07:37:25][350178734261035][4180 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-08 07:37:25][350178734261035][4180 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:37:28][350178734261035][0 ms][INFO] === Request start === [2025-09-08 07:37:28][350178734261035][1 ms][DEBUG] START check_scloud [2025-09-08 07:37:28][350178734261035][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:37:28][350178734261035][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 10426 27480 23949632 160804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:37:28][350178734261035][311 ms][DEBUG] targetPkg: running [2025-09-08 07:37:28][350178734261035][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 07:37:28][350178734261035][311 ms][DEBUG] START check_boot_completed [2025-09-08 07:37:28][350178734261035][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:37:28][350178734261035][340 ms][DEBUG] ADB: done in 29 ms; out [2025-09-08 07:37:28][350178734261035][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:37:28][350178734261035][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:37:28][350178734261035][387 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-08 07:37:28][350178734261035][387 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:37:28][350178734261035][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178734261035\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4952\"}'\'' -e'"" [2025-09-08 07:37:28][350178734261035][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:37:28][350178734261035][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178734261035\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4952\"}'\'' -e'"" [2025-09-08 07:37:33][350178734261035][5199 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5f18512-99f8-4082-b804-309427e4fda4","id":"QR_d5f18512-99f8-4082-b804-309427e4fda4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:37:33][350178734261035][5355 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-08 07:37:33][350178734261035][5355 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-09-08 07:37:33][350178734261035][5355 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:44:03][356414817641304][1 ms][INFO] === Request start === [2025-09-08 07:44:03][356414817641304][1 ms][DEBUG] START check_scloud [2025-09-08 07:44:03][356414817641304][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:44:03][356414817641304][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 10426 27480 24089032 172636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:44:03][356414817641304][299 ms][DEBUG] targetPkg: running [2025-09-08 07:44:03][356414817641304][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 07:44:03][356414817641304][299 ms][DEBUG] START check_boot_completed [2025-09-08 07:44:03][356414817641304][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:44:03][356414817641304][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 07:44:03][356414817641304][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:44:03][356414817641304][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:44:03][356414817641304][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 07:44:03][356414817641304][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:44:03][356414817641304][502 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1919\nsuccessfulTxPacketsPerSecond: 0.18719857334981996\nretriedTxPackets: 431\nretriedTxPacketsPerSecond: 0.05911533895257472\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1832\nsuccessfulRxPacketsPerSecond: 0.13793579088934102\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:44:03][356414817641304][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:44:05][356414817641304][2470 ms][DEBUG] SU: done in 1968 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.375/200.375/200.375/0.000 ms\n [2025-09-08 07:44:05][356414817641304][2470 ms][DEBUG] check_internet: online [2025-09-08 07:44:05][356414817641304][2471 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:44:05][356414817641304][2471 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817641304\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9751\"}'\'' -e'"" [2025-09-08 07:44:05][356414817641304][2471 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:44:05][356414817641304][2471 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817641304\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9751\"}'\'' -e'"" [2025-09-08 07:44:09][356414817641304][6578 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66da0e4d-bb01-4cb0-81dc-74368360a783","id":"QR_66da0e4d-bb01-4cb0-81dc-74368360a783","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:44:09][356414817641304][6735 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-09-08 07:44:09][356414817641304][6735 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-09-08 07:44:09][356414817641304][6735 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:44:12][356414817641304][0 ms][INFO] === Request start === [2025-09-08 07:44:12][356414817641304][1 ms][DEBUG] START check_scloud [2025-09-08 07:44:12][356414817641304][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:44:12][356414817641304][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 10426 27480 24230684 184632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:44:12][356414817641304][317 ms][DEBUG] targetPkg: running [2025-09-08 07:44:12][356414817641304][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 07:44:12][356414817641304][317 ms][DEBUG] START check_boot_completed [2025-09-08 07:44:12][356414817641304][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:44:12][356414817641304][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:44:12][356414817641304][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:44:12][356414817641304][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:44:12][356414817641304][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 07:44:12][356414817641304][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 07:44:12][356414817641304][520 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1919\nsuccessfulTxPacketsPerSecond: 0.18719857334981996\nretriedTxPackets: 431\nretriedTxPacketsPerSecond: 0.05911533895257472\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1832\nsuccessfulRxPacketsPerSecond: 0.13793579088934102\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 07:44:12][356414817641304][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 07:44:12][356414817641304][817 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.834/192.834/192.834/0.000 ms\n [2025-09-08 07:44:12][356414817641304][817 ms][DEBUG] check_internet: online [2025-09-08 07:44:12][356414817641304][817 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:44:12][356414817641304][817 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817641304\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2084\"}'\'' -e'"" [2025-09-08 07:44:12][356414817641304][817 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:44:12][356414817641304][817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817641304\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2084\"}'\'' -e'"" [2025-09-08 07:44:18][356414817641304][5971 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9585bd6b-b831-415c-92fe-09c3d633d32b","id":"QR_9585bd6b-b831-415c-92fe-09c3d633d32b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:44:18][356414817641304][6128 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-08 07:44:18][356414817641304][6128 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 07:44:18][356414817641304][6128 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:53:06][353684146279314][1 ms][INFO] === Request start === [2025-09-08 07:53:06][353684146279314][1 ms][DEBUG] START check_scloud [2025-09-08 07:53:06][353684146279314][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:53:07][353684146279314][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 10426 27480 24329104 172352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:53:07][353684146279314][272 ms][DEBUG] targetPkg: running [2025-09-08 07:53:07][353684146279314][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-08 07:53:07][353684146279314][272 ms][DEBUG] START check_boot_completed [2025-09-08 07:53:07][353684146279314][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:53:07][353684146279314][303 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 07:53:07][353684146279314][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:53:07][353684146279314][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:53:07][353684146279314][350 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 07:53:07][353684146279314][350 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:53:07][353684146279314][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684146279314\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9829\"}'\'' -e'"" [2025-09-08 07:53:07][353684146279314][350 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:53:07][353684146279314][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684146279314\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9829\"}'\'' -e'"" [2025-09-08 07:53:12][353684146279314][5880 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc116b3f-2f8b-4f56-9179-576323b7da8b","id":"QR_bc116b3f-2f8b-4f56-9179-576323b7da8b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:53:12][353684146279314][6036 ms][DEBUG] proc_open done in 5686 ms; code=255; res.len=3343 [2025-09-08 07:53:12][353684146279314][6036 ms][DEBUG] END runCmdUntilRes#1 in 5686 ms [2025-09-08 07:53:12][353684146279314][6036 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:55:04][353243887483237][0 ms][INFO] === Request start === [2025-09-08 07:55:04][353243887483237][1 ms][DEBUG] START check_scloud [2025-09-08 07:55:04][353243887483237][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:55:04][353243887483237][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 10426 27480 24487104 157264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:55:04][353243887483237][305 ms][DEBUG] targetPkg: running [2025-09-08 07:55:04][353243887483237][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 07:55:04][353243887483237][305 ms][DEBUG] START check_boot_completed [2025-09-08 07:55:04][353243887483237][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:55:04][353243887483237][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:55:04][353243887483237][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:55:04][353243887483237][429 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 07:55:04][353243887483237][429 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 07:55:04][353243887483237][429 ms][DEBUG] rawBody.length=1150 [2025-09-08 07:55:04][353243887483237][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243887483237\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2020\"}'\'' -e'"" [2025-09-08 07:55:04][353243887483237][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:55:04][353243887483237][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243887483237\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2020\"}'\'' -e'"" [2025-09-08 07:55:08][353243887483237][4975 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_864b147b-f5de-4d26-a674-cff3a838a0e1","id":"QR_864b147b-f5de-4d26-a674-cff3a838a0e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:55:09][353243887483237][5131 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-08 07:55:09][353243887483237][5131 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-08 07:55:09][353243887483237][5131 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 07:55:11][353243887483237][1 ms][INFO] === Request start === [2025-09-08 07:55:11][353243887483237][1 ms][DEBUG] START check_scloud [2025-09-08 07:55:11][353243887483237][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 07:55:11][353243887483237][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 10426 27480 24621512 168984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 07:55:11][353243887483237][247 ms][DEBUG] targetPkg: running [2025-09-08 07:55:11][353243887483237][247 ms][DEBUG] END check_scloud in 246 ms [2025-09-08 07:55:11][353243887483237][247 ms][DEBUG] START check_boot_completed [2025-09-08 07:55:11][353243887483237][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 07:55:11][353243887483237][293 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 07:55:11][353243887483237][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 07:55:11][353243887483237][340 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 07:55:11][353243887483237][340 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 07:55:11][353243887483237][340 ms][DEBUG] rawBody.length=1160 [2025-09-08 07:55:11][353243887483237][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243887483237\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9627\"}'\'' -e'"" [2025-09-08 07:55:11][353243887483237][340 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 07:55:11][353243887483237][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243887483237\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9627\"}'\'' -e'"" [2025-09-08 07:55:16][353243887483237][5432 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_525ff955-1e47-4d4e-8991-863a4e363b34","id":"QR_525ff955-1e47-4d4e-8991-863a4e363b34","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 07:55:17][353243887483237][5588 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-09-08 07:55:17][353243887483237][5588 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-09-08 07:55:17][353243887483237][5589 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:08:03][350152501559202][1 ms][INFO] === Request start === [2025-09-08 08:08:03][350152501559202][1 ms][DEBUG] START check_scloud [2025-09-08 08:08:03][350152501559202][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:08:03][350152501559202][245 ms][DEBUG] SU: done in 244 ms; outu0_a118 10426 27480 24705536 180456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:08:03][350152501559202][245 ms][DEBUG] targetPkg: running [2025-09-08 08:08:03][350152501559202][246 ms][DEBUG] END check_scloud in 244 ms [2025-09-08 08:08:03][350152501559202][246 ms][DEBUG] START check_boot_completed [2025-09-08 08:08:03][350152501559202][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:08:04][350152501559202][292 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:08:04][350152501559202][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:08:04][350152501559202][339 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:08:04][350152501559202][339 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:08:04][350152501559202][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:08:04][350152501559202][464 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2350\nsuccessfulTxPacketsPerSecond: 0.15190542236312002\nretriedTxPackets: 521\nretriedTxPacketsPerSecond: 0.036325209695528694\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2221\nsuccessfulRxPacketsPerSecond: 0.13869625520110956\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:08:04][350152501559202][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:08:05][350152501559202][1979 ms][DEBUG] SU: done in 1515 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.147/200.147/200.147/0.000 ms\n [2025-09-08 08:08:05][350152501559202][1979 ms][DEBUG] check_internet: online [2025-09-08 08:08:05][350152501559202][1980 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:08:05][350152501559202][1980 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350152501559202\",\"model\":\"SM-A536J\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1668\"}'\'' -e'"" [2025-09-08 08:08:05][350152501559202][1980 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:08:05][350152501559202][1980 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350152501559202\",\"model\":\"SM-A536J\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1668\"}'\'' -e'"" [2025-09-08 08:08:09][350152501559202][6212 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c6045f1-5cad-49f2-89f3-d3d5177303b0","id":"QR_7c6045f1-5cad-49f2-89f3-d3d5177303b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:08:10][350152501559202][6369 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-08 08:08:10][350152501559202][6369 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-08 08:08:10][350152501559202][6369 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:08:12][350152501559202][0 ms][INFO] === Request start === [2025-09-08 08:08:12][350152501559202][1 ms][DEBUG] START check_scloud [2025-09-08 08:08:12][350152501559202][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:08:12][350152501559202][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 10426 27480 24896340 191692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:08:12][350152501559202][311 ms][DEBUG] targetPkg: running [2025-09-08 08:08:12][350152501559202][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 08:08:12][350152501559202][311 ms][DEBUG] START check_boot_completed [2025-09-08 08:08:12][350152501559202][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:08:12][350152501559202][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:08:12][350152501559202][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:08:12][350152501559202][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:08:12][350152501559202][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:08:12][350152501559202][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:08:13][350152501559202][514 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=42226793 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2350\nsuccessfulTxPacketsPerSecond: 0.15190542236312002\nretriedTxPackets: 521\nretriedTxPacketsPerSecond: 0.036325209695528694\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2221\nsuccessfulRxPacketsPerSecond: 0.13869625520110956\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:08:13][350152501559202][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:08:13][350152501559202][780 ms][DEBUG] SU: done in 266 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.986/163.986/163.986/0.000 ms\n [2025-09-08 08:08:13][350152501559202][780 ms][DEBUG] check_internet: online [2025-09-08 08:08:13][350152501559202][780 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:08:13][350152501559202][780 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350152501559202\",\"model\":\"SM-A536J\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KDI\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9152\"}'\'' -e'"" [2025-09-08 08:08:13][350152501559202][780 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:08:13][350152501559202][780 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350152501559202\",\"model\":\"SM-A536J\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KDI\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9152\"}'\'' -e'"" [2025-09-08 08:08:21][350152501559202][9043 ms][DEBUG] proc_open done in 8263 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 08:08:21][350152501559202][9043 ms][DEBUG] END runCmdUntilRes#1 in 8263 ms [2025-09-08 08:08:21][350152501559202][9043 ms][WARN] Detected error: Process with pid 10426 either refused to load frida-agent, or terminated during injectionProcess with pid 10426 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 08:08:21][350152501559202][9044 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 08:08:22][350152501559202][9543 ms][DEBUG] SU: done in 499 ms; out [2025-09-08 08:08:22][350152501559202][9543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 08:08:22][350152501559202][9871 ms][DEBUG] SU: done in 328 ms; out [2025-09-08 08:08:22][350152501559202][9871 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 08:08:22][350152501559202][9871 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 08:08:22][350152501559202][10090 ms][DEBUG] SU: done in 219 ms; out [2025-09-08 08:08:22][350152501559202][10090 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 08:08:22][350152501559202][10308 ms][DEBUG] SU: done in 218 ms; out [2025-09-08 08:08:24][350152501559202][12323 ms][DEBUG] START check_boot_completed [2025-09-08 08:08:24][350152501559202][12324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:08:24][350152501559202][12370 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:08:24][350152501559202][12370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:08:24][350152501559202][12433 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 08:08:24][350152501559202][12433 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 08:08:27][350152501559202][15448 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 08:08:27][350152501559202][15448 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350152501559202\",\"model\":\"SM-A536J\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KDI\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9152\"}'\'' -e'"" [2025-09-08 08:08:29][350152501559202][17166 ms][DEBUG] proc_open done in 1718 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-08 08:08:29][350152501559202][17166 ms][DEBUG] END runCmdUntilRes#2 in 1719 ms [2025-09-08 08:08:29][350152501559202][17167 ms][WARN] Detected error 2; Reboot the device [2025-09-08 08:08:29][350152501559202][17167 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 08:08:29][350152501559202][17479 ms][DEBUG] SU: done in 312 ms; outsystem 13310 12970 7677012 144592 0 0 R system_server\n [2025-09-08 08:08:29][350152501559202][17479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-08 08:08:30][350152501559202][18088 ms][DEBUG] SU: done in 609 ms; out [2025-09-08 08:09:03][358212585861221][0 ms][INFO] === Request start === [2025-09-08 08:09:03][358212585861221][1 ms][DEBUG] START check_scloud [2025-09-08 08:09:03][358212585861221][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:09:03][358212585861221][47 ms][DEBUG] SU: done in 46 ms; out [2025-09-08 08:09:03][358212585861221][47 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 08:09:04][358212585861221][78 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-08 08:09:04][358212585861221][78 ms][WARN] check_devices: no device [2025-09-08 08:09:04][358212585861221][78 ms][WARN] check_devices: no device [2025-09-08 08:09:04][358212585861221][78 ms][DEBUG] END check_scloud in 78 ms [2025-09-08 08:10:03][358212585861221][1 ms][INFO] === Request start === [2025-09-08 08:10:03][358212585861221][1 ms][DEBUG] START check_scloud [2025-09-08 08:10:03][358212585861221][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:10:03][358212585861221][346 ms][DEBUG] SU: done in 345 ms; out [2025-09-08 08:10:03][358212585861221][346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 08:10:03][358212585861221][392 ms][DEBUG] ADB: done in 46 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 08:10:03][358212585861221][392 ms][DEBUG] check_devices: device found [2025-09-08 08:10:03][358212585861221][392 ms][WARN] targetPkg: not running, restarting [2025-09-08 08:10:03][358212585861221][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 08:10:03][358212585861221][533 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 08:10:03][358212585861221][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 08:10:04][358212585861221][736 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 08:10:06][358212585861221][2751 ms][DEBUG] END check_scloud in 2750 ms [2025-09-08 08:10:06][358212585861221][2751 ms][DEBUG] START check_boot_completed [2025-09-08 08:10:06][358212585861221][2751 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:10:06][358212585861221][2798 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:10:06][358212585861221][2798 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:10:06][358212585861221][2860 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 08:10:06][358212585861221][2860 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:10:06][358212585861221][2860 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:10:06][358212585861221][3079 ms][DEBUG] SU: done in 219 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30798 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 267\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 15\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 249\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:10:06][358212585861221][3079 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:10:07][358212585861221][4016 ms][DEBUG] SU: done in 937 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.908/199.908/199.908/0.000 ms\n [2025-09-08 08:10:07][358212585861221][4016 ms][DEBUG] check_internet: online [2025-09-08 08:10:07][358212585861221][4017 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:10:07][358212585861221][4017 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212585861221\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3141\"}'\'' -e'"" [2025-09-08 08:10:07][358212585861221][4017 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:10:07][358212585861221][4017 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212585861221\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3141\"}'\'' -e'"" [2025-09-08 08:10:13][358212585861221][9780 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a6748651-5cfb-4a7c-afd1-46a37559087f","id":"QR_a6748651-5cfb-4a7c-afd1-46a37559087f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:10:13][358212585861221][9937 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-09-08 08:10:13][358212585861221][9937 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-09-08 08:10:13][358212585861221][9937 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:10:15][358212585861221][1 ms][INFO] === Request start === [2025-09-08 08:10:15][358212585861221][1 ms][DEBUG] START check_scloud [2025-09-08 08:10:15][358212585861221][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:10:15][358212585861221][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 10868 5014 23708480 106132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:10:15][358212585861221][322 ms][DEBUG] targetPkg: running [2025-09-08 08:10:15][358212585861221][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-08 08:10:15][358212585861221][322 ms][DEBUG] START check_boot_completed [2025-09-08 08:10:15][358212585861221][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:10:16][358212585861221][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:10:16][358212585861221][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:10:16][358212585861221][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:10:16][358212585861221][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:10:16][358212585861221][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:10:16][358212585861221][540 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30798 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 267\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 15\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 249\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:10:16][358212585861221][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:10:16][358212585861221][837 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.756/156.756/156.756/0.000 ms\n [2025-09-08 08:10:16][358212585861221][837 ms][DEBUG] check_internet: online [2025-09-08 08:10:16][358212585861221][837 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:10:16][358212585861221][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212585861221\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1884\"}'\'' -e'"" [2025-09-08 08:10:16][358212585861221][838 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:10:16][358212585861221][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212585861221\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1884\"}'\'' -e'"" [2025-09-08 08:10:22][358212585861221][6914 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd99a7fe-aa55-4f1b-80ec-4df24ed22a4a","id":"QR_dd99a7fe-aa55-4f1b-80ec-4df24ed22a4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:10:22][358212585861221][7070 ms][DEBUG] proc_open done in 6232 ms; code=255; res.len=3343 [2025-09-08 08:10:22][358212585861221][7070 ms][DEBUG] END runCmdUntilRes#1 in 6232 ms [2025-09-08 08:10:22][358212585861221][7070 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:10:26][351642484253525][0 ms][INFO] === Request start === [2025-09-08 08:10:26][351642484253525][1 ms][DEBUG] START check_scloud [2025-09-08 08:10:26][351642484253525][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:10:27][351642484253525][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 10868 5014 23841876 92268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:10:27][351642484253525][327 ms][DEBUG] targetPkg: running [2025-09-08 08:10:27][351642484253525][327 ms][DEBUG] END check_scloud in 326 ms [2025-09-08 08:10:27][351642484253525][327 ms][DEBUG] START check_boot_completed [2025-09-08 08:10:27][351642484253525][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:10:27][351642484253525][373 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:10:27][351642484253525][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:10:27][351642484253525][420 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:10:27][351642484253525][420 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:10:27][351642484253525][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:10:27][351642484253525][545 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30798 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 546\nsuccessfulTxPacketsPerSecond: 13.66057351588542\nretriedTxPackets: 50\nretriedTxPacketsPerSecond: 1.713692018121827\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 535\nsuccessfulRxPacketsPerSecond: 14.003311919509786\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:10:27][351642484253525][545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:10:27][351642484253525][905 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.299/218.299/218.299/0.000 ms\n [2025-09-08 08:10:27][351642484253525][905 ms][DEBUG] check_internet: online [2025-09-08 08:10:27][351642484253525][905 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:10:27][351642484253525][905 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642484253525\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3683\"}'\'' -e'"" [2025-09-08 08:10:27][351642484253525][905 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:10:27][351642484253525][905 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642484253525\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3683\"}'\'' -e'"" [2025-09-08 08:10:31][351642484253525][5044 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a7be922-02de-45f5-9b21-6ce83752b285","id":"QR_3a7be922-02de-45f5-9b21-6ce83752b285","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:10:32][351642484253525][5200 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-09-08 08:10:32][351642484253525][5200 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-09-08 08:10:32][351642484253525][5200 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:10:34][351642484253525][0 ms][INFO] === Request start === [2025-09-08 08:10:34][351642484253525][1 ms][DEBUG] START check_scloud [2025-09-08 08:10:34][351642484253525][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:10:34][351642484253525][334 ms][DEBUG] SU: done in 333 ms; outu0_a118 10868 5014 23959800 94240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:10:34][351642484253525][334 ms][DEBUG] targetPkg: running [2025-09-08 08:10:34][351642484253525][334 ms][DEBUG] END check_scloud in 333 ms [2025-09-08 08:10:34][351642484253525][334 ms][DEBUG] START check_boot_completed [2025-09-08 08:10:34][351642484253525][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:10:34][351642484253525][381 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:10:34][351642484253525][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:10:34][351642484253525][443 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 08:10:34][351642484253525][443 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:10:34][351642484253525][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:10:34][351642484253525][553 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30798 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 783\nsuccessfulTxPacketsPerSecond: 23.51630094252559\nretriedTxPackets: 85\nretriedTxPacketsPerSecond: 3.4617447407317488\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 856\nsuccessfulRxPacketsPerSecond: 31.686358207021392\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:10:34][351642484253525][553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:10:35][351642484253525][833 ms][DEBUG] SU: done in 280 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=165 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 165.223/165.223/165.223/0.000 ms\n [2025-09-08 08:10:35][351642484253525][833 ms][DEBUG] check_internet: online [2025-09-08 08:10:35][351642484253525][833 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:10:35][351642484253525][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642484253525\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3415\"}'\'' -e'"" [2025-09-08 08:10:35][351642484253525][833 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:10:35][351642484253525][834 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642484253525\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3415\"}'\'' -e'"" [2025-09-08 08:10:40][351642484253525][5832 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b6630108-f40f-449e-8e59-954107e98cb5","id":"QR_b6630108-f40f-449e-8e59-954107e98cb5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:10:40][351642484253525][5988 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3343 [2025-09-08 08:10:40][351642484253525][5989 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-08 08:10:40][351642484253525][5989 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:11:03][350176953451253][0 ms][INFO] === Request start === [2025-09-08 08:11:03][350176953451253][1 ms][DEBUG] START check_scloud [2025-09-08 08:11:03][350176953451253][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:11:04][350176953451253][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 10868 5014 23989220 72748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:11:04][350176953451253][317 ms][DEBUG] targetPkg: running [2025-09-08 08:11:04][350176953451253][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 08:11:04][350176953451253][317 ms][DEBUG] START check_boot_completed [2025-09-08 08:11:04][350176953451253][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:11:04][350176953451253][348 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 08:11:04][350176953451253][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:11:04][350176953451253][410 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 08:11:04][350176953451253][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 08:11:04][350176953451253][411 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:11:04][350176953451253][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350176953451253\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5019\"}'\'' -e'"" [2025-09-08 08:11:04][350176953451253][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:11:04][350176953451253][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350176953451253\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5019\"}'\'' -e'"" [2025-09-08 08:11:08][350176953451253][4472 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d9e17a9-7333-4d1d-9b9f-c816f814c9f6","id":"QR_7d9e17a9-7333-4d1d-9b9f-c816f814c9f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:11:08][350176953451253][4628 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-09-08 08:11:08][350176953451253][4628 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-09-08 08:11:08][350176953451253][4628 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:11:10][350176953451253][0 ms][INFO] === Request start === [2025-09-08 08:11:10][350176953451253][1 ms][DEBUG] START check_scloud [2025-09-08 08:11:10][350176953451253][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:11:11][350176953451253][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 10868 5014 24137836 84500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:11:11][350176953451253][317 ms][DEBUG] targetPkg: running [2025-09-08 08:11:11][350176953451253][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 08:11:11][350176953451253][317 ms][DEBUG] START check_boot_completed [2025-09-08 08:11:11][350176953451253][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:11:11][350176953451253][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:11:11][350176953451253][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:11:11][350176953451253][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:11:11][350176953451253][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:11:11][350176953451253][411 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:11:11][350176953451253][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350176953451253\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6356\"}'\'' -e'"" [2025-09-08 08:11:11][350176953451253][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:11:11][350176953451253][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350176953451253\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6356\"}'\'' -e'"" [2025-09-08 08:11:15][350176953451253][5003 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc4ff9dd-a0d2-4407-aa52-88918bd359cd","id":"QR_dc4ff9dd-a0d2-4407-aa52-88918bd359cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:11:15][350176953451253][5160 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3343 [2025-09-08 08:11:15][350176953451253][5160 ms][DEBUG] END runCmdUntilRes#1 in 4749 ms [2025-09-08 08:11:15][350176953451253][5160 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:12:03][355506802181138][0 ms][INFO] === Request start === [2025-09-08 08:12:03][355506802181138][1 ms][DEBUG] START check_scloud [2025-09-08 08:12:03][355506802181138][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:12:03][355506802181138][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 10868 5014 24235308 102972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:12:03][355506802181138][317 ms][DEBUG] targetPkg: running [2025-09-08 08:12:03][355506802181138][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 08:12:03][355506802181138][317 ms][DEBUG] START check_boot_completed [2025-09-08 08:12:03][355506802181138][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:12:03][355506802181138][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:12:03][355506802181138][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:12:03][355506802181138][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:12:03][355506802181138][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:12:03][355506802181138][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:12:03][355506802181138][550 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30798 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 842\nsuccessfulTxPacketsPerSecond: 6.642319743508468\nretriedTxPackets: 103\nretriedTxPacketsPerSecond: 1.8875103506196385\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 900\nsuccessfulRxPacketsPerSecond: 5.4831563557115315\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:12:03][355506802181138][550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:12:04][355506802181138][909 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.024/221.024/221.024/0.000 ms\n [2025-09-08 08:12:04][355506802181138][909 ms][DEBUG] check_internet: online [2025-09-08 08:12:04][355506802181138][910 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:12:04][355506802181138][910 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802181138\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2471\"}'\'' -e'"" [2025-09-08 08:12:04][355506802181138][910 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:12:04][355506802181138][910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802181138\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2471\"}'\'' -e'"" [2025-09-08 08:12:08][355506802181138][5346 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70aec17c-8f4f-418e-b528-7d843fa12965","id":"QR_70aec17c-8f4f-418e-b528-7d843fa12965","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:12:08][355506802181138][5502 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-08 08:12:08][355506802181138][5502 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-09-08 08:12:08][355506802181138][5502 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:12:11][355506802181138][1 ms][INFO] === Request start === [2025-09-08 08:12:11][355506802181138][1 ms][DEBUG] START check_scloud [2025-09-08 08:12:11][355506802181138][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:12:11][355506802181138][320 ms][DEBUG] SU: done in 318 ms; outu0_a118 10868 5014 24364520 114884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:12:11][355506802181138][320 ms][DEBUG] targetPkg: running [2025-09-08 08:12:11][355506802181138][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 08:12:11][355506802181138][320 ms][DEBUG] START check_boot_completed [2025-09-08 08:12:11][355506802181138][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:12:11][355506802181138][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:12:11][355506802181138][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:12:11][355506802181138][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 08:12:11][355506802181138][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:12:11][355506802181138][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:12:11][355506802181138][554 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30798 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 842\nsuccessfulTxPacketsPerSecond: 6.642319743508468\nretriedTxPackets: 103\nretriedTxPacketsPerSecond: 1.8875103506196385\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 900\nsuccessfulRxPacketsPerSecond: 5.4831563557115315\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:12:11][355506802181138][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:12:12][355506802181138][913 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.349/256.349/256.349/0.000 ms\n [2025-09-08 08:12:12][355506802181138][913 ms][DEBUG] check_internet: online [2025-09-08 08:12:12][355506802181138][913 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:12:12][355506802181138][914 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802181138\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8710\"}'\'' -e'"" [2025-09-08 08:12:12][355506802181138][914 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:12:12][355506802181138][914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802181138\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8710\"}'\'' -e'"" [2025-09-08 08:12:17][355506802181138][6006 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d1185d4-7054-4c0d-8150-b9a9e07b8473","id":"QR_7d1185d4-7054-4c0d-8150-b9a9e07b8473","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:12:17][355506802181138][6162 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-08 08:12:17][355506802181138][6162 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-08 08:12:17][355506802181138][6162 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:16:03][351250091395398][1 ms][INFO] === Request start === [2025-09-08 08:16:03][351250091395398][1 ms][DEBUG] START check_scloud [2025-09-08 08:16:03][351250091395398][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:16:03][351250091395398][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 10868 5014 24490664 123280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:16:03][351250091395398][278 ms][DEBUG] targetPkg: running [2025-09-08 08:16:03][351250091395398][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-08 08:16:03][351250091395398][278 ms][DEBUG] START check_boot_completed [2025-09-08 08:16:03][351250091395398][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:16:04][351250091395398][309 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 08:16:04][351250091395398][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:16:04][351250091395398][357 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 08:16:04][351250091395398][357 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 08:16:04][351250091395398][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:16:04][351250091395398][497 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30798 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1179\nsuccessfulTxPacketsPerSecond: 1.3839040055191898\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 0.19300738355905614\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1203\nsuccessfulRxPacketsPerSecond: 1.2442816429445536\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:16:04][351250091395398][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:16:05][351250091395398][2262 ms][DEBUG] SU: done in 1765 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.152/199.152/199.152/0.000 ms\n [2025-09-08 08:16:05][351250091395398][2262 ms][DEBUG] check_internet: online [2025-09-08 08:16:05][351250091395398][2262 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:16:05][351250091395398][2262 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351250091395398\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8174\"}'\'' -e'"" [2025-09-08 08:16:05][351250091395398][2262 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:16:05][351250091395398][2262 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351250091395398\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8174\"}'\'' -e'"" [2025-09-08 08:16:10][351250091395398][6933 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4dcc5d45-5538-467c-af82-4a7896ca0408","id":"QR_4dcc5d45-5538-467c-af82-4a7896ca0408","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:16:10][351250091395398][7089 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-08 08:16:10][351250091395398][7089 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-08 08:16:10][351250091395398][7089 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:16:13][351250091395398][0 ms][INFO] === Request start === [2025-09-08 08:16:13][351250091395398][1 ms][DEBUG] START check_scloud [2025-09-08 08:16:13][351250091395398][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:16:13][351250091395398][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 10868 5014 24625072 134648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:16:13][351250091395398][324 ms][DEBUG] targetPkg: running [2025-09-08 08:16:13][351250091395398][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-08 08:16:13][351250091395398][324 ms][DEBUG] START check_boot_completed [2025-09-08 08:16:13][351250091395398][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:16:13][351250091395398][355 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 08:16:13][351250091395398][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:16:13][351250091395398][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:16:13][351250091395398][402 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 08:16:13][351250091395398][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:16:13][351250091395398][513 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30798 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1179\nsuccessfulTxPacketsPerSecond: 1.3839040055191898\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 0.19300738355905614\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1203\nsuccessfulRxPacketsPerSecond: 1.2442816429445536\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:16:13][351250091395398][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:16:13][351250091395398][839 ms][DEBUG] SU: done in 326 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=229 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 229.087/229.087/229.087/0.000 ms\n [2025-09-08 08:16:13][351250091395398][839 ms][DEBUG] check_internet: online [2025-09-08 08:16:13][351250091395398][839 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:16:13][351250091395398][840 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351250091395398\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3044\"}'\'' -e'"" [2025-09-08 08:16:13][351250091395398][840 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:16:13][351250091395398][840 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351250091395398\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3044\"}'\'' -e'"" [2025-09-08 08:16:19][351250091395398][6244 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7746915a-8a62-4517-a10a-f0921e0be680","id":"QR_7746915a-8a62-4517-a10a-f0921e0be680","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:16:19][351250091395398][6400 ms][DEBUG] proc_open done in 5561 ms; code=255; res.len=3343 [2025-09-08 08:16:19][351250091395398][6401 ms][DEBUG] END runCmdUntilRes#1 in 5561 ms [2025-09-08 08:16:19][351250091395398][6401 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:16:28][357265992517811][0 ms][INFO] === Request start === [2025-09-08 08:16:28][357265992517811][1 ms][DEBUG] START check_scloud [2025-09-08 08:16:28][357265992517811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:16:29][357265992517811][296 ms][DEBUG] SU: done in 296 ms; outu0_a118 10868 5014 24751256 143612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:16:29][357265992517811][297 ms][DEBUG] targetPkg: running [2025-09-08 08:16:29][357265992517811][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-08 08:16:29][357265992517811][297 ms][DEBUG] START check_boot_completed [2025-09-08 08:16:29][357265992517811][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:16:29][357265992517811][343 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:16:29][357265992517811][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:16:29][357265992517811][437 ms][DEBUG] SU: done in 93 ms; out [2025-09-08 08:16:29][357265992517811][437 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 08:16:29][357265992517811][437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:16:29][357265992517811][562 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30798 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1179\nsuccessfulTxPacketsPerSecond: 1.3839040055191898\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 0.19300738355905614\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1203\nsuccessfulRxPacketsPerSecond: 1.2442816429445536\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:16:29][357265992517811][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:16:29][357265992517811][1015 ms][DEBUG] SU: done in 453 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=348 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 348.059/348.059/348.059/0.000 ms\n [2025-09-08 08:16:29][357265992517811][1015 ms][DEBUG] check_internet: online [2025-09-08 08:16:29][357265992517811][1015 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:16:29][357265992517811][1015 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357265992517811\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1940\"}'\'' -e'"" [2025-09-08 08:16:29][357265992517811][1015 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:16:29][357265992517811][1015 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357265992517811\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1940\"}'\'' -e'"" [2025-09-08 08:16:33][357265992517811][4389 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05e7c4c2-43a7-4683-b9f8-06407c5c37f2","id":"QR_05e7c4c2-43a7-4683-b9f8-06407c5c37f2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:16:33][357265992517811][4545 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-08 08:16:33][357265992517811][4545 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-08 08:16:33][357265992517811][4545 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:16:35][357265992517811][0 ms][INFO] === Request start === [2025-09-08 08:16:35][357265992517811][1 ms][DEBUG] START check_scloud [2025-09-08 08:16:35][357265992517811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:16:35][357265992517811][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 10868 5014 24905204 155548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:16:35][357265992517811][273 ms][DEBUG] targetPkg: running [2025-09-08 08:16:35][357265992517811][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-08 08:16:35][357265992517811][273 ms][DEBUG] START check_boot_completed [2025-09-08 08:16:35][357265992517811][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:16:35][357265992517811][319 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:16:35][357265992517811][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:16:35][357265992517811][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:16:35][357265992517811][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:16:35][357265992517811][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:16:35][357265992517811][475 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30798 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1179\nsuccessfulTxPacketsPerSecond: 1.3839040055191898\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 0.19300738355905614\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1203\nsuccessfulRxPacketsPerSecond: 1.2442816429445536\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:16:35][357265992517811][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:16:36][357265992517811][741 ms][DEBUG] SU: done in 265 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.598/164.598/164.598/0.000 ms\n [2025-09-08 08:16:36][357265992517811][741 ms][DEBUG] check_internet: online [2025-09-08 08:16:36][357265992517811][741 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:16:36][357265992517811][741 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357265992517811\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6835\"}'\'' -e'"" [2025-09-08 08:16:36][357265992517811][742 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:16:36][357265992517811][742 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357265992517811\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6835\"}'\'' -e'"" [2025-09-08 08:16:45][357265992517811][9958 ms][DEBUG] proc_open done in 9216 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 08:16:45][357265992517811][9958 ms][DEBUG] END runCmdUntilRes#1 in 9216 ms [2025-09-08 08:16:45][357265992517811][9958 ms][WARN] Detected error: Process with pid 10868 either refused to load frida-agent, or terminated during injectionProcess with pid 10868 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 08:16:45][357265992517811][9958 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 08:16:46][357265992517811][10520 ms][DEBUG] SU: done in 562 ms; out [2025-09-08 08:16:46][357265992517811][10520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 08:16:46][357265992517811][10723 ms][DEBUG] SU: done in 203 ms; out [2025-09-08 08:16:46][357265992517811][10723 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 08:16:46][357265992517811][10723 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 08:16:46][357265992517811][10989 ms][DEBUG] SU: done in 265 ms; out [2025-09-08 08:16:46][357265992517811][10989 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 08:16:46][357265992517811][11239 ms][DEBUG] SU: done in 250 ms; out [2025-09-08 08:16:48][357265992517811][13254 ms][DEBUG] START check_boot_completed [2025-09-08 08:16:48][357265992517811][13254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:16:48][357265992517811][13301 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:16:48][357265992517811][13301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:16:48][357265992517811][13363 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 08:16:48][357265992517811][13363 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 08:16:51][357265992517811][16378 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 08:16:51][357265992517811][16378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357265992517811\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6835\"}'\'' -e'"" [2025-09-08 08:16:53][357265992517811][17909 ms][DEBUG] proc_open done in 1531 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-08 08:16:53][357265992517811][17909 ms][DEBUG] END runCmdUntilRes#2 in 1531 ms [2025-09-08 08:16:53][357265992517811][17909 ms][WARN] Detected error 2; Reboot the device [2025-09-08 08:16:53][357265992517811][17909 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 08:16:53][357265992517811][18175 ms][DEBUG] SU: done in 265 ms; outsystem 19355 19012 7644500 153492 wait_on_page_bit_common 0 D system_server\n [2025-09-08 08:16:53][357265992517811][18175 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-08 08:16:54][357265992517811][18830 ms][DEBUG] SU: done in 656 ms; out [2025-09-08 08:17:03][351798162184612][1 ms][INFO] === Request start === [2025-09-08 08:17:03][351798162184612][1 ms][DEBUG] START check_scloud [2025-09-08 08:17:03][351798162184612][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:17:03][351798162184612][41 ms][DEBUG] SU: done in 40 ms; out [2025-09-08 08:17:03][351798162184612][41 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 08:17:04][351798162184612][88 ms][DEBUG] ADB: done in 46 ms; outList of devices attached\n\n [2025-09-08 08:17:04][351798162184612][88 ms][WARN] check_devices: no device [2025-09-08 08:17:04][351798162184612][88 ms][WARN] check_devices: no device [2025-09-08 08:17:04][351798162184612][88 ms][DEBUG] END check_scloud in 87 ms [2025-09-08 08:17:10][351877474141070][0 ms][INFO] === Request start === [2025-09-08 08:17:10][351877474141070][1 ms][DEBUG] START check_scloud [2025-09-08 08:17:10][351877474141070][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:17:10][351877474141070][42 ms][DEBUG] SU: done in 41 ms; out [2025-09-08 08:17:10][351877474141070][42 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 08:17:10][351877474141070][73 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-08 08:17:10][351877474141070][73 ms][WARN] check_devices: no device [2025-09-08 08:17:10][351877474141070][73 ms][WARN] check_devices: no device [2025-09-08 08:17:10][351877474141070][73 ms][DEBUG] END check_scloud in 72 ms [2025-09-08 08:17:14][354253096115685][0 ms][INFO] === Request start === [2025-09-08 08:17:14][354253096115685][1 ms][DEBUG] START check_scloud [2025-09-08 08:17:14][354253096115685][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:17:14][354253096115685][36 ms][DEBUG] SU: done in 35 ms; out [2025-09-08 08:17:14][354253096115685][36 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 08:17:14][354253096115685][68 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-08 08:17:14][354253096115685][68 ms][WARN] check_devices: no device [2025-09-08 08:17:14][354253096115685][68 ms][WARN] check_devices: no device [2025-09-08 08:17:14][354253096115685][68 ms][DEBUG] END check_scloud in 67 ms [2025-09-08 08:18:04][351798162184612][1 ms][INFO] === Request start === [2025-09-08 08:18:04][351798162184612][1 ms][DEBUG] START check_scloud [2025-09-08 08:18:04][351798162184612][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:18:04][351798162184612][482 ms][DEBUG] SU: done in 481 ms; out [2025-09-08 08:18:04][351798162184612][483 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 08:18:04][351798162184612][514 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 08:18:04][351798162184612][514 ms][DEBUG] check_devices: device found [2025-09-08 08:18:04][351798162184612][514 ms][WARN] targetPkg: not running, restarting [2025-09-08 08:18:04][351798162184612][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 08:18:04][351798162184612][654 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 08:18:04][351798162184612][655 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 08:18:05][351798162184612][1092 ms][DEBUG] SU: done in 437 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 08:18:07][351798162184612][3107 ms][DEBUG] END check_scloud in 3106 ms [2025-09-08 08:18:07][351798162184612][3107 ms][DEBUG] START check_boot_completed [2025-09-08 08:18:07][351798162184612][3107 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:18:07][351798162184612][3154 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:18:07][351798162184612][3154 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:18:07][351798162184612][3372 ms][DEBUG] SU: done in 219 ms; out [2025-09-08 08:18:07][351798162184612][3372 ms][DEBUG] END check_boot_completed in 266 ms [2025-09-08 08:18:07][351798162184612][3373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:18:07][351798162184612][3857 ms][DEBUG] SU: done in 484 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30272 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 82\nsuccessfulTxPacketsPerSecond: 8.599645987259146\nretriedTxPackets: 5\nretriedTxPacketsPerSecond: 0.3692069379811251\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 68\nsuccessfulRxPacketsPerSecond: 7.6967197087820916\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:18:07][351798162184612][3857 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:18:08][351798162184612][4904 ms][DEBUG] SU: done in 1047 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.511/196.511/196.511/0.000 ms\n [2025-09-08 08:18:08][351798162184612][4904 ms][DEBUG] check_internet: online [2025-09-08 08:18:08][351798162184612][4904 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:18:08][351798162184612][4904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798162184612\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5798\"}'\'' -e'"" [2025-09-08 08:18:08][351798162184612][4904 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:18:08][351798162184612][4904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798162184612\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5798\"}'\'' -e'"" [2025-09-08 08:18:15][351798162184612][11933 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_53adcf5b-6998-4d62-b302-740b5683dae8","id":"QR_53adcf5b-6998-4d62-b302-740b5683dae8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:18:16][351798162184612][12089 ms][DEBUG] proc_open done in 7185 ms; code=255; res.len=3343 [2025-09-08 08:18:16][351798162184612][12089 ms][DEBUG] END runCmdUntilRes#1 in 7185 ms [2025-09-08 08:18:16][351798162184612][12089 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:18:18][351798162184612][0 ms][INFO] === Request start === [2025-09-08 08:18:18][351798162184612][1 ms][DEBUG] START check_scloud [2025-09-08 08:18:18][351798162184612][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:18:18][351798162184612][367 ms][DEBUG] SU: done in 366 ms; outu0_a118 7756 4883 23753396 110216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:18:18][351798162184612][367 ms][DEBUG] targetPkg: running [2025-09-08 08:18:18][351798162184612][367 ms][DEBUG] END check_scloud in 366 ms [2025-09-08 08:18:18][351798162184612][367 ms][DEBUG] START check_boot_completed [2025-09-08 08:18:18][351798162184612][367 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:18:18][351798162184612][413 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:18:18][351798162184612][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:18:19][351798162184612][476 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 08:18:19][351798162184612][476 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:18:19][351798162184612][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:18:19][351798162184612][632 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30272 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 122\nsuccessfulTxPacketsPerSecond: 7.177809420582125\nretriedTxPackets: 20\nretriedTxPacketsPerSecond: 2.464616139485754\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 110\nsuccessfulRxPacketsPerSecond: 7.004301688639984\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:18:19][351798162184612][633 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:18:19][351798162184612][945 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=157 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 157.082/157.082/157.082/0.000 ms\n [2025-09-08 08:18:19][351798162184612][945 ms][DEBUG] check_internet: online [2025-09-08 08:18:19][351798162184612][945 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:18:19][351798162184612][945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798162184612\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2445\"}'\'' -e'"" [2025-09-08 08:18:19][351798162184612][945 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:18:19][351798162184612][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798162184612\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2445\"}'\'' -e'"" [2025-09-08 08:18:26][351798162184612][7693 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0cdbd80-9276-487e-b762-bcec1bf71745","id":"QR_c0cdbd80-9276-487e-b762-bcec1bf71745","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:18:26][351798162184612][7849 ms][DEBUG] proc_open done in 6904 ms; code=255; res.len=3343 [2025-09-08 08:18:26][351798162184612][7849 ms][DEBUG] END runCmdUntilRes#1 in 6904 ms [2025-09-08 08:18:26][351798162184612][7849 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:18:34][351877474141070][0 ms][INFO] === Request start === [2025-09-08 08:18:34][351877474141070][1 ms][DEBUG] START check_scloud [2025-09-08 08:18:34][351877474141070][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:18:34][351877474141070][355 ms][DEBUG] SU: done in 355 ms; outu0_a118 7756 4883 23915908 89084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:18:34][351877474141070][356 ms][DEBUG] targetPkg: running [2025-09-08 08:18:34][351877474141070][356 ms][DEBUG] END check_scloud in 355 ms [2025-09-08 08:18:34][351877474141070][356 ms][DEBUG] START check_boot_completed [2025-09-08 08:18:34][351877474141070][356 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:18:34][351877474141070][402 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:18:34][351877474141070][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:18:34][351877474141070][480 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 08:18:34][351877474141070][481 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 08:18:34][351877474141070][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:18:34][351877474141070][668 ms][DEBUG] SU: done in 187 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30272 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 152\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 22\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 145\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:18:34][351877474141070][668 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:18:35][351877474141070][1043 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.471/253.471/253.471/0.000 ms\n [2025-09-08 08:18:35][351877474141070][1043 ms][DEBUG] check_internet: online [2025-09-08 08:18:35][351877474141070][1043 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:18:35][351877474141070][1043 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877474141070\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6020\"}'\'' -e'"" [2025-09-08 08:18:35][351877474141070][1043 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:18:35][351877474141070][1043 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877474141070\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6020\"}'\'' -e'"" [2025-09-08 08:18:41][351877474141070][7229 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8d3c631-9bb9-4fdc-80b0-51e92397367a","id":"QR_a8d3c631-9bb9-4fdc-80b0-51e92397367a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:18:41][351877474141070][7385 ms][DEBUG] proc_open done in 6342 ms; code=255; res.len=3343 [2025-09-08 08:18:41][351877474141070][7385 ms][DEBUG] END runCmdUntilRes#1 in 6342 ms [2025-09-08 08:18:41][351877474141070][7385 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:19:03][354253096115685][0 ms][INFO] === Request start === [2025-09-08 08:19:03][354253096115685][1 ms][DEBUG] START check_scloud [2025-09-08 08:19:03][354253096115685][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:19:03][354253096115685][353 ms][DEBUG] SU: done in 352 ms; outu0_a118 7756 4883 23939476 64972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:19:03][354253096115685][353 ms][DEBUG] targetPkg: running [2025-09-08 08:19:03][354253096115685][353 ms][DEBUG] END check_scloud in 352 ms [2025-09-08 08:19:03][354253096115685][353 ms][DEBUG] START check_boot_completed [2025-09-08 08:19:03][354253096115685][353 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:19:03][354253096115685][384 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 08:19:03][354253096115685][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:19:03][354253096115685][431 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:19:03][354253096115685][431 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 08:19:03][354253096115685][431 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:19:03][354253096115685][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354253096115685\",\"model\":\"SM-J737S\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8327\"}'\'' -e'"" [2025-09-08 08:19:03][354253096115685][431 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:19:03][354253096115685][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354253096115685\",\"model\":\"SM-J737S\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8327\"}'\'' -e'"" [2025-09-08 08:19:08][354253096115685][5180 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79c3a20e-bce3-49e4-852d-36ed44f5f9db","id":"QR_79c3a20e-bce3-49e4-852d-36ed44f5f9db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:19:08][354253096115685][5336 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-08 08:19:08][354253096115685][5336 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-08 08:19:08][354253096115685][5336 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:19:10][354253096115685][0 ms][INFO] === Request start === [2025-09-08 08:19:10][354253096115685][1 ms][DEBUG] START check_scloud [2025-09-08 08:19:10][354253096115685][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:19:11][354253096115685][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 7756 4883 24071708 85248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:19:11][354253096115685][315 ms][DEBUG] targetPkg: running [2025-09-08 08:19:11][354253096115685][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 08:19:11][354253096115685][315 ms][DEBUG] START check_boot_completed [2025-09-08 08:19:11][354253096115685][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:19:11][354253096115685][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:19:11][354253096115685][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:19:11][354253096115685][410 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 08:19:11][354253096115685][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 08:19:11][354253096115685][410 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:19:11][354253096115685][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354253096115685\",\"model\":\"SM-J737S\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1906\"}'\'' -e'"" [2025-09-08 08:19:11][354253096115685][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:19:11][354253096115685][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354253096115685\",\"model\":\"SM-J737S\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1906\"}'\'' -e'"" [2025-09-08 08:19:16][354253096115685][5204 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d654018e-dfbc-4555-961a-bef2f4d022ce","id":"QR_d654018e-dfbc-4555-961a-bef2f4d022ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:19:16][354253096115685][5360 ms][DEBUG] proc_open done in 4950 ms; code=255; res.len=3343 [2025-09-08 08:19:16][354253096115685][5360 ms][DEBUG] END runCmdUntilRes#1 in 4950 ms [2025-09-08 08:19:16][354253096115685][5360 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:19:20][350753202185377][0 ms][INFO] === Request start === [2025-09-08 08:19:20][350753202185377][1 ms][DEBUG] START check_scloud [2025-09-08 08:19:20][350753202185377][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:19:20][350753202185377][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 7756 4883 24201828 88960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:19:20][350753202185377][325 ms][DEBUG] targetPkg: running [2025-09-08 08:19:20][350753202185377][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 08:19:20][350753202185377][325 ms][DEBUG] START check_boot_completed [2025-09-08 08:19:20][350753202185377][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:19:20][350753202185377][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:19:20][350753202185377][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:19:20][350753202185377][434 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 08:19:20][350753202185377][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:19:20][350753202185377][434 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:19:20][350753202185377][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753202185377\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2544\"}'\'' -e'"" [2025-09-08 08:19:20][350753202185377][434 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:19:20][350753202185377][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753202185377\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2544\"}'\'' -e'"" [2025-09-08 08:19:25][350753202185377][4605 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54fc6446-3556-4872-9069-6e0ba365a841","id":"QR_54fc6446-3556-4872-9069-6e0ba365a841","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:19:25][350753202185377][4761 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-09-08 08:19:25][350753202185377][4761 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-09-08 08:19:25][350753202185377][4761 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:19:27][350753202185377][0 ms][INFO] === Request start === [2025-09-08 08:19:27][350753202185377][1 ms][DEBUG] START check_scloud [2025-09-08 08:19:27][350753202185377][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:19:27][350753202185377][346 ms][DEBUG] SU: done in 345 ms; outu0_a118 7756 4883 24354632 97548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:19:27][350753202185377][346 ms][DEBUG] targetPkg: running [2025-09-08 08:19:27][350753202185377][346 ms][DEBUG] END check_scloud in 345 ms [2025-09-08 08:19:27][350753202185377][346 ms][DEBUG] START check_boot_completed [2025-09-08 08:19:27][350753202185377][346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:19:27][350753202185377][393 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:19:27][350753202185377][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:19:28][350753202185377][455 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 08:19:28][350753202185377][455 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:19:28][350753202185377][455 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:19:28][350753202185377][456 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753202185377\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2713\"}'\'' -e'"" [2025-09-08 08:19:28][350753202185377][456 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:19:28][350753202185377][456 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753202185377\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2713\"}'\'' -e'"" [2025-09-08 08:20:03][351424285157571][1 ms][INFO] === Request start === [2025-09-08 08:20:03][351424285157571][1 ms][DEBUG] START check_scloud [2025-09-08 08:20:03][351424285157571][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:20:03][351424285157571][279 ms][DEBUG] SU: done in 278 ms; out [2025-09-08 08:20:03][351424285157571][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 08:20:03][351424285157571][311 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 08:20:03][351424285157571][311 ms][DEBUG] check_devices: device found [2025-09-08 08:20:03][351424285157571][311 ms][WARN] targetPkg: not running, restarting [2025-09-08 08:20:03][351424285157571][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 08:20:03][351424285157571][436 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 08:20:03][351424285157571][436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 08:20:03][351424285157571][717 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 08:20:05][351424285157571][2732 ms][DEBUG] END check_scloud in 2731 ms [2025-09-08 08:20:05][351424285157571][2732 ms][DEBUG] START check_boot_completed [2025-09-08 08:20:05][351424285157571][2732 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:20:05][351424285157571][2779 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:20:05][351424285157571][2779 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:20:06][351424285157571][3029 ms][DEBUG] SU: done in 250 ms; out [2025-09-08 08:20:06][351424285157571][3029 ms][DEBUG] END check_boot_completed in 297 ms [2025-09-08 08:20:06][351424285157571][3029 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:20:06][351424285157571][3591 ms][DEBUG] SU: done in 562 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4\nsuccessfulTxPacketsPerSecond: 1.1605098673463214\nretriedTxPackets: 1\nretriedTxPacketsPerSecond: 0.3176248702782946\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3\nsuccessfulRxPacketsPerSecond: 0.9528746108348838\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 0, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:20:06][351424285157571][3592 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:20:08][351424285157571][5028 ms][DEBUG] SU: done in 1437 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=157 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 157.118/157.118/157.118/0.000 ms\n [2025-09-08 08:20:08][351424285157571][5028 ms][DEBUG] check_internet: online [2025-09-08 08:20:08][351424285157571][5029 ms][DEBUG] rawBody.length=1149 [2025-09-08 08:20:08][351424285157571][5029 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351424285157571\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1825\"}'\'' -e'"" [2025-09-08 08:20:08][351424285157571][5029 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:20:08][351424285157571][5029 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351424285157571\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1825\"}'\'' -e'"" [2025-09-08 08:20:17][351424285157571][14354 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9569105f-eafe-452c-9a89-19c8f6999bc2","id":"QR_9569105f-eafe-452c-9a89-19c8f6999bc2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:20:17][351424285157571][14510 ms][DEBUG] proc_open done in 9481 ms; code=255; res.len=3343 [2025-09-08 08:20:17][351424285157571][14510 ms][DEBUG] END runCmdUntilRes#1 in 9482 ms [2025-09-08 08:20:17][351424285157571][14511 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:20:20][351424285157571][0 ms][INFO] === Request start === [2025-09-08 08:20:20][351424285157571][1 ms][DEBUG] START check_scloud [2025-09-08 08:20:20][351424285157571][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:20:20][351424285157571][387 ms][DEBUG] SU: done in 386 ms; outu0_a118 19955 18092 23610944 102332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:20:20][351424285157571][387 ms][DEBUG] targetPkg: running [2025-09-08 08:20:20][351424285157571][387 ms][DEBUG] END check_scloud in 387 ms [2025-09-08 08:20:20][351424285157571][387 ms][DEBUG] START check_boot_completed [2025-09-08 08:20:20][351424285157571][387 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:20:20][351424285157571][434 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:20:20][351424285157571][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:20:20][351424285157571][496 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 08:20:20][351424285157571][497 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:20:20][351424285157571][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:20:20][351424285157571][669 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 150\nsuccessfulTxPacketsPerSecond: 11.195659448577441\nretriedTxPackets: 16\nretriedTxPacketsPerSecond: 1.068222917956103\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 145\nsuccessfulRxPacketsPerSecond: 11.482421520017658\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:20:20][351424285157571][669 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:20:21][351424285157571][981 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=166 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 166.147/166.147/166.147/0.000 ms\n [2025-09-08 08:20:21][351424285157571][981 ms][DEBUG] check_internet: online [2025-09-08 08:20:21][351424285157571][981 ms][DEBUG] rawBody.length=1159 [2025-09-08 08:20:21][351424285157571][981 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351424285157571\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6509\"}'\'' -e'"" [2025-09-08 08:20:21][351424285157571][981 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:20:21][351424285157571][981 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351424285157571\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6509\"}'\'' -e'"" [2025-09-08 08:20:26][351424285157571][6667 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6bd2f3b4-ffdc-4944-9c9e-9f461b904208","id":"QR_6bd2f3b4-ffdc-4944-9c9e-9f461b904208","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:20:26][351424285157571][6823 ms][DEBUG] proc_open done in 5842 ms; code=255; res.len=3343 [2025-09-08 08:20:26][351424285157571][6823 ms][DEBUG] END runCmdUntilRes#1 in 5842 ms [2025-09-08 08:20:26][351424285157571][6823 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:20:32][359823619747043][0 ms][INFO] === Request start === [2025-09-08 08:20:32][359823619747043][1 ms][DEBUG] START check_scloud [2025-09-08 08:20:32][359823619747043][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:20:32][359823619747043][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 19955 18092 23753364 85084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:20:32][359823619747043][330 ms][DEBUG] targetPkg: running [2025-09-08 08:20:32][359823619747043][330 ms][DEBUG] END check_scloud in 329 ms [2025-09-08 08:20:32][359823619747043][330 ms][DEBUG] START check_boot_completed [2025-09-08 08:20:32][359823619747043][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:20:32][359823619747043][377 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:20:32][359823619747043][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:20:32][359823619747043][439 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 08:20:32][359823619747043][439 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:20:32][359823619747043][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:20:32][359823619747043][564 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 151\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 18\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 149\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:20:32][359823619747043][564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:20:33][359823619747043][924 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=230 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 230.210/230.210/230.210/0.000 ms\n [2025-09-08 08:20:33][359823619747043][924 ms][DEBUG] check_internet: online [2025-09-08 08:20:33][359823619747043][924 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:20:33][359823619747043][924 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359823619747043\",\"model\":\"SM-G781U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1535\"}'\'' -e'"" [2025-09-08 08:20:33][359823619747043][924 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:20:33][359823619747043][924 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359823619747043\",\"model\":\"SM-G781U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1535\"}'\'' -e'"" [2025-09-08 08:20:38][359823619747043][6063 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_303138f9-3fd6-4d6f-bfb9-ec2ba200ec3f","id":"QR_303138f9-3fd6-4d6f-bfb9-ec2ba200ec3f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:20:38][359823619747043][6219 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 08:20:38][359823619747043][6219 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 08:20:38][359823619747043][6219 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:20:41][359823619747043][0 ms][INFO] === Request start === [2025-09-08 08:20:41][359823619747043][1 ms][DEBUG] START check_scloud [2025-09-08 08:20:41][359823619747043][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:20:42][359823619747043][424 ms][DEBUG] SU: done in 423 ms; outu0_a118 19955 18092 23813860 87616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:20:42][359823619747043][424 ms][DEBUG] targetPkg: running [2025-09-08 08:20:42][359823619747043][424 ms][DEBUG] END check_scloud in 423 ms [2025-09-08 08:20:42][359823619747043][424 ms][DEBUG] START check_boot_completed [2025-09-08 08:20:42][359823619747043][424 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:20:42][359823619747043][455 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 08:20:42][359823619747043][455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:20:42][359823619747043][518 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 08:20:42][359823619747043][518 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 08:20:42][359823619747043][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:20:42][359823619747043][644 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 151\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 18\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 149\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:20:42][359823619747043][644 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:20:42][359823619747043][955 ms][DEBUG] SU: done in 311 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=181 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 181.726/181.726/181.726/0.000 ms\n [2025-09-08 08:20:42][359823619747043][955 ms][DEBUG] check_internet: online [2025-09-08 08:20:42][359823619747043][955 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:20:42][359823619747043][955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359823619747043\",\"model\":\"SM-G781U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4666\"}'\'' -e'"" [2025-09-08 08:20:42][359823619747043][955 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:20:42][359823619747043][955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359823619747043\",\"model\":\"SM-G781U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4666\"}'\'' -e'"" [2025-09-08 08:20:47][359823619747043][5485 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70410a8b-2d06-4a92-989a-fc140312d549","id":"QR_70410a8b-2d06-4a92-989a-fc140312d549","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:20:47][359823619747043][5641 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-08 08:20:47][359823619747043][5642 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-08 08:20:47][359823619747043][5642 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:25:03][351137777132445][1 ms][INFO] === Request start === [2025-09-08 08:25:03][351137777132445][1 ms][DEBUG] START check_scloud [2025-09-08 08:25:03][351137777132445][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:25:03][351137777132445][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 19955 18092 23909912 63364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:25:03][351137777132445][286 ms][DEBUG] targetPkg: running [2025-09-08 08:25:03][351137777132445][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-08 08:25:03][351137777132445][286 ms][DEBUG] START check_boot_completed [2025-09-08 08:25:03][351137777132445][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:25:04][351137777132445][317 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 08:25:04][351137777132445][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:25:04][351137777132445][364 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:25:04][351137777132445][364 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 08:25:04][351137777132445][364 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:25:04][351137777132445][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351137777132445\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4747\"}'\'' -e'"" [2025-09-08 08:25:04][351137777132445][364 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:25:04][351137777132445][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351137777132445\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4747\"}'\'' -e'"" [2025-09-08 08:25:09][351137777132445][5378 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7584c425-428c-4662-a1f5-aa60e242c024","id":"QR_7584c425-428c-4662-a1f5-aa60e242c024","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:25:09][351137777132445][5534 ms][DEBUG] proc_open done in 5171 ms; code=255; res.len=3343 [2025-09-08 08:25:09][351137777132445][5534 ms][DEBUG] END runCmdUntilRes#1 in 5171 ms [2025-09-08 08:25:09][351137777132445][5535 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:25:11][351137777132445][0 ms][INFO] === Request start === [2025-09-08 08:25:11][351137777132445][1 ms][DEBUG] START check_scloud [2025-09-08 08:25:11][351137777132445][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:25:11][351137777132445][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 19955 18092 24072992 84956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:25:11][351137777132445][326 ms][DEBUG] targetPkg: running [2025-09-08 08:25:11][351137777132445][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-08 08:25:11][351137777132445][326 ms][DEBUG] START check_boot_completed [2025-09-08 08:25:11][351137777132445][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:25:11][351137777132445][373 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:25:11][351137777132445][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:25:11][351137777132445][419 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:25:11][351137777132445][419 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:25:11][351137777132445][419 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:25:11][351137777132445][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351137777132445\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5978\"}'\'' -e'"" [2025-09-08 08:25:11][351137777132445][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:25:11][351137777132445][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351137777132445\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5978\"}'\'' -e'"" [2025-09-08 08:25:17][351137777132445][5777 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_162c9b59-6a4a-48f4-8a1a-d00af5379cd8","id":"QR_162c9b59-6a4a-48f4-8a1a-d00af5379cd8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:25:17][351137777132445][5934 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-08 08:25:17][351137777132445][5934 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-08 08:25:17][351137777132445][5934 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:25:21][352539598456185][0 ms][INFO] === Request start === [2025-09-08 08:25:21][352539598456185][1 ms][DEBUG] START check_scloud [2025-09-08 08:25:21][352539598456185][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:25:21][352539598456185][334 ms][DEBUG] SU: done in 333 ms; outu0_a118 19955 18092 24219688 97372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:25:21][352539598456185][334 ms][DEBUG] targetPkg: running [2025-09-08 08:25:21][352539598456185][334 ms][DEBUG] END check_scloud in 334 ms [2025-09-08 08:25:21][352539598456185][334 ms][DEBUG] START check_boot_completed [2025-09-08 08:25:21][352539598456185][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:25:22][352539598456185][381 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:25:22][352539598456185][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:25:22][352539598456185][443 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 08:25:22][352539598456185][444 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:25:22][352539598456185][444 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:25:22][352539598456185][444 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539598456185\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4920\"}'\'' -e'"" [2025-09-08 08:25:22][352539598456185][444 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:25:22][352539598456185][444 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539598456185\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4920\"}'\'' -e'"" [2025-09-08 08:25:25][352539598456185][3942 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0361c367-8d8d-4a15-b033-25d536d4c5ca","id":"QR_0361c367-8d8d-4a15-b033-25d536d4c5ca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:25:25][352539598456185][4099 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-09-08 08:25:25][352539598456185][4099 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-08 08:25:25][352539598456185][4099 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:25:28][352539598456185][0 ms][INFO] === Request start === [2025-09-08 08:25:28][352539598456185][1 ms][DEBUG] START check_scloud [2025-09-08 08:25:28][352539598456185][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:25:28][352539598456185][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 19955 18092 24360204 108628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:25:28][352539598456185][322 ms][DEBUG] targetPkg: running [2025-09-08 08:25:28][352539598456185][322 ms][DEBUG] END check_scloud in 322 ms [2025-09-08 08:25:28][352539598456185][322 ms][DEBUG] START check_boot_completed [2025-09-08 08:25:28][352539598456185][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:25:28][352539598456185][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:25:28][352539598456185][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:25:28][352539598456185][417 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 08:25:28][352539598456185][417 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 08:25:28][352539598456185][417 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:25:28][352539598456185][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539598456185\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1027\"}'\'' -e'"" [2025-09-08 08:25:28][352539598456185][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:25:28][352539598456185][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539598456185\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1027\"}'\'' -e'"" [2025-09-08 08:25:33][352539598456185][5383 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81ab8098-3e2e-4f14-b942-11ce313df085","id":"QR_81ab8098-3e2e-4f14-b942-11ce313df085","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:25:33][352539598456185][5539 ms][DEBUG] proc_open done in 5122 ms; code=255; res.len=3343 [2025-09-08 08:25:33][352539598456185][5539 ms][DEBUG] END runCmdUntilRes#1 in 5122 ms [2025-09-08 08:25:33][352539598456185][5540 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:26:03][354505621368745][0 ms][INFO] === Request start === [2025-09-08 08:26:03][354505621368745][1 ms][DEBUG] START check_scloud [2025-09-08 08:26:03][354505621368745][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:26:03][354505621368745][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 19955 18092 24461672 120180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:26:03][354505621368745][294 ms][DEBUG] targetPkg: running [2025-09-08 08:26:03][354505621368745][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-08 08:26:03][354505621368745][294 ms][DEBUG] START check_boot_completed [2025-09-08 08:26:03][354505621368745][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:26:03][354505621368745][325 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 08:26:03][354505621368745][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:26:03][354505621368745][388 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 08:26:03][354505621368745][388 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 08:26:03][354505621368745][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:26:03][354505621368745][544 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 915\nsuccessfulTxPacketsPerSecond: 0.9072370885180407\nretriedTxPackets: 200\nretriedTxPacketsPerSecond: 0.1747887968704482\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 969\nsuccessfulRxPacketsPerSecond: 0.8739439843522411\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:26:03][354505621368745][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:26:04][354505621368745][1871 ms][DEBUG] SU: done in 1327 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.277/198.277/198.277/0.000 ms\n [2025-09-08 08:26:04][354505621368745][1871 ms][DEBUG] check_internet: online [2025-09-08 08:26:04][354505621368745][1872 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:26:04][354505621368745][1872 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505621368745\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3267\"}'\'' -e'"" [2025-09-08 08:26:04][354505621368745][1872 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:26:04][354505621368745][1872 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505621368745\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3267\"}'\'' -e'"" [2025-09-08 08:26:08][354505621368745][5214 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2f866a0-f53b-4202-8dbe-7a8a2375dc10","id":"QR_c2f866a0-f53b-4202-8dbe-7a8a2375dc10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:26:08][354505621368745][5371 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-08 08:26:08][354505621368745][5371 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-08 08:26:08][354505621368745][5371 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:26:10][354505621368745][0 ms][INFO] === Request start === [2025-09-08 08:26:10][354505621368745][1 ms][DEBUG] START check_scloud [2025-09-08 08:26:10][354505621368745][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:26:11][354505621368745][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 19955 18092 24591344 131440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:26:11][354505621368745][300 ms][DEBUG] targetPkg: running [2025-09-08 08:26:11][354505621368745][300 ms][DEBUG] END check_scloud in 300 ms [2025-09-08 08:26:11][354505621368745][300 ms][DEBUG] START check_boot_completed [2025-09-08 08:26:11][354505621368745][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:26:11][354505621368745][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:26:11][354505621368745][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:26:11][354505621368745][409 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 08:26:11][354505621368745][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:26:11][354505621368745][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:26:11][354505621368745][534 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 915\nsuccessfulTxPacketsPerSecond: 0.9072370885180407\nretriedTxPackets: 200\nretriedTxPacketsPerSecond: 0.1747887968704482\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 969\nsuccessfulRxPacketsPerSecond: 0.8739439843522411\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:26:11][354505621368745][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:26:11][354505621368745][862 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=213 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 213.685/213.685/213.685/0.000 ms\n [2025-09-08 08:26:11][354505621368745][863 ms][DEBUG] check_internet: online [2025-09-08 08:26:11][354505621368745][863 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:26:11][354505621368745][863 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505621368745\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1200\"}'\'' -e'"" [2025-09-08 08:26:11][354505621368745][863 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:26:11][354505621368745][863 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505621368745\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1200\"}'\'' -e'"" [2025-09-08 08:26:16][354505621368745][5798 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2141d8e7-3154-4e27-885c-65d804280da9","id":"QR_2141d8e7-3154-4e27-885c-65d804280da9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:26:16][354505621368745][5955 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-08 08:26:16][354505621368745][5955 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-08 08:26:16][354505621368745][5955 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:27:03][354505622615680][1 ms][INFO] === Request start === [2025-09-08 08:27:03][354505622615680][1 ms][DEBUG] START check_scloud [2025-09-08 08:27:03][354505622615680][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:27:03][354505622615680][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 19955 18092 24684720 138632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:27:03][354505622615680][314 ms][DEBUG] targetPkg: running [2025-09-08 08:27:03][354505622615680][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 08:27:03][354505622615680][314 ms][DEBUG] START check_boot_completed [2025-09-08 08:27:03][354505622615680][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:27:03][354505622615680][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:27:03][354505622615680][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:27:03][354505622615680][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:27:03][354505622615680][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:27:03][354505622615680][407 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:27:03][354505622615680][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505622615680\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4967\"}'\'' -e'"" [2025-09-08 08:27:03][354505622615680][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:27:03][354505622615680][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505622615680\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4967\"}'\'' -e'"" [2025-09-08 08:27:08][354505622615680][5156 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7cd13663-f1fd-4903-8e57-ccf34686050b","id":"QR_7cd13663-f1fd-4903-8e57-ccf34686050b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:27:08][354505622615680][5312 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-08 08:27:08][354505622615680][5312 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-08 08:27:08][354505622615680][5312 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:27:10][354505622615680][1 ms][INFO] === Request start === [2025-09-08 08:27:10][354505622615680][1 ms][DEBUG] START check_scloud [2025-09-08 08:27:10][354505622615680][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:27:11][354505622615680][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 19955 18092 24843576 149636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:27:11][354505622615680][291 ms][DEBUG] targetPkg: running [2025-09-08 08:27:11][354505622615680][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-08 08:27:11][354505622615680][291 ms][DEBUG] START check_boot_completed [2025-09-08 08:27:11][354505622615680][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:27:11][354505622615680][338 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:27:11][354505622615680][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:27:11][354505622615680][416 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 08:27:11][354505622615680][416 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 08:27:11][354505622615680][416 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:27:11][354505622615680][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505622615680\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9495\"}'\'' -e'"" [2025-09-08 08:27:11][354505622615680][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:27:11][354505622615680][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505622615680\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9495\"}'\'' -e'"" [2025-09-08 08:27:15][354505622615680][4727 ms][DEBUG] proc_open done in 4311 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 08:27:15][354505622615680][4727 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-09-08 08:27:15][354505622615680][4727 ms][WARN] Detected error: Process with pid 19955 either refused to load frida-agent, or terminated during injectionProcess with pid 19955 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 08:27:15][354505622615680][4727 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 08:27:15][354505622615680][4977 ms][DEBUG] SU: done in 250 ms; outsystem 18326 18092 13130536 593200 ep_poll 0 S system_server\n [2025-09-08 08:27:15][354505622615680][4977 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 08:27:15][354505622615680][5118 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 08:27:15][354505622615680][5118 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 08:27:15][354505622615680][5118 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 08:27:16][354505622615680][5258 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 08:27:16][354505622615680][5259 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 08:27:16][354505622615680][5539 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 08:27:18][354505622615680][7554 ms][DEBUG] START check_boot_completed [2025-09-08 08:27:18][354505622615680][7555 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:27:18][354505622615680][7601 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:27:18][354505622615680][7601 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:27:18][354505622615680][7648 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:27:18][354505622615680][7648 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 08:27:21][354505622615680][10663 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 08:27:21][354505622615680][10663 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505622615680\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9495\"}'\'' -e'"" [2025-09-08 08:27:26][354505622615680][15693 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da53a321-c72d-458b-80e4-66a73da188a9","id":"QR_da53a321-c72d-458b-80e4-66a73da188a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:27:26][354505622615680][15849 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-08 08:27:26][354505622615680][15849 ms][DEBUG] END runCmdUntilRes#2 in 5186 ms [2025-09-08 08:27:26][354505622615680][15849 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:29:04][353372915126805][0 ms][INFO] === Request start === [2025-09-08 08:29:04][353372915126805][1 ms][DEBUG] START check_scloud [2025-09-08 08:29:04][353372915126805][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:29:05][353372915126805][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 31352 18092 23498684 127092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:29:05][353372915126805][311 ms][DEBUG] targetPkg: running [2025-09-08 08:29:05][353372915126805][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 08:29:05][353372915126805][311 ms][DEBUG] START check_boot_completed [2025-09-08 08:29:05][353372915126805][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:29:05][353372915126805][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:29:05][353372915126805][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:29:05][353372915126805][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 08:29:05][353372915126805][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:29:05][353372915126805][420 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:29:05][353372915126805][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372915126805\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1956\"}'\'' -e'"" [2025-09-08 08:29:05][353372915126805][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:29:05][353372915126805][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372915126805\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1956\"}'\'' -e'"" [2025-09-08 08:29:09][353372915126805][4450 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 08:29:09][353372915126805][4606 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=107 [2025-09-08 08:29:09][353372915126805][4606 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-08 08:29:09][353372915126805][4606 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 08:29:09][][0 ms][INFO] === Request start === [2025-09-08 08:29:09][][1 ms][DEBUG] START check_scloud [2025-09-08 08:29:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:29:10][][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 31352 18092 23675068 137804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:29:10][][325 ms][DEBUG] targetPkg: running [2025-09-08 08:29:10][][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 08:29:10][][325 ms][DEBUG] START check_boot_completed [2025-09-08 08:29:10][][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:29:10][][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:29:10][][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:29:10][][421 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 08:29:10][][421 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-08 08:29:10][][421 ms][DEBUG] rawBody.length=1131 [2025-09-08 08:29:10][][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW1013D1H\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3313\"}'\'' -e'"" [2025-09-08 08:29:10][][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:29:10][][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW1013D1H\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3313\"}'\'' -e'"" [2025-09-08 08:29:13][][3449 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 08:29:13][][3605 ms][DEBUG] proc_open done in 3184 ms; code=255; res.len=107 [2025-09-08 08:29:13][][3605 ms][DEBUG] END runCmdUntilRes#1 in 3184 ms [2025-09-08 08:29:13][][3605 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 08:29:15][353372915126805][1 ms][INFO] === Request start === [2025-09-08 08:29:15][353372915126805][1 ms][DEBUG] START check_scloud [2025-09-08 08:29:15][353372915126805][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:29:15][353372915126805][279 ms][DEBUG] SU: done in 277 ms; outu0_a118 31352 18092 23850244 149376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:29:15][353372915126805][279 ms][DEBUG] targetPkg: running [2025-09-08 08:29:15][353372915126805][279 ms][DEBUG] END check_scloud in 278 ms [2025-09-08 08:29:15][353372915126805][279 ms][DEBUG] START check_boot_completed [2025-09-08 08:29:15][353372915126805][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:29:15][353372915126805][325 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:29:15][353372915126805][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:29:15][353372915126805][388 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 08:29:15][353372915126805][388 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:29:15][353372915126805][388 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:29:15][353372915126805][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372915126805\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4725\"}'\'' -e'"" [2025-09-08 08:29:15][353372915126805][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:29:15][353372915126805][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372915126805\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4725\"}'\'' -e'"" [2025-09-08 08:29:20][353372915126805][5871 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_300dbc38-f0d6-4537-8de7-1f104e54788a","id":"QR_300dbc38-f0d6-4537-8de7-1f104e54788a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:29:21][353372915126805][6027 ms][DEBUG] proc_open done in 5639 ms; code=255; res.len=3343 [2025-09-08 08:29:21][353372915126805][6027 ms][DEBUG] END runCmdUntilRes#1 in 5639 ms [2025-09-08 08:29:21][353372915126805][6027 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:37:03][351161649780017][1 ms][INFO] === Request start === [2025-09-08 08:37:03][351161649780017][1 ms][DEBUG] START check_scloud [2025-09-08 08:37:03][351161649780017][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:37:03][351161649780017][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 31352 18092 23940352 161412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:37:03][351161649780017][291 ms][DEBUG] targetPkg: running [2025-09-08 08:37:03][351161649780017][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-08 08:37:03][351161649780017][291 ms][DEBUG] START check_boot_completed [2025-09-08 08:37:03][351161649780017][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:37:03][351161649780017][322 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 08:37:03][351161649780017][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:37:03][351161649780017][385 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 08:37:03][351161649780017][385 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 08:37:03][351161649780017][385 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:37:03][351161649780017][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351161649780017\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1046\"}'\'' -e'"" [2025-09-08 08:37:03][351161649780017][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:37:03][351161649780017][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351161649780017\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1046\"}'\'' -e'"" [2025-09-08 08:37:08][351161649780017][4931 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe72c5d9-a952-4d08-9165-5497ba23c84e","id":"QR_fe72c5d9-a952-4d08-9165-5497ba23c84e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:37:08][351161649780017][5087 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-08 08:37:08][351161649780017][5087 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-09-08 08:37:08][351161649780017][5087 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:37:10][351161649780017][0 ms][INFO] === Request start === [2025-09-08 08:37:10][351161649780017][1 ms][DEBUG] START check_scloud [2025-09-08 08:37:10][351161649780017][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:37:11][351161649780017][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 31352 18092 24128916 171888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:37:11][351161649780017][310 ms][DEBUG] targetPkg: running [2025-09-08 08:37:11][351161649780017][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 08:37:11][351161649780017][310 ms][DEBUG] START check_boot_completed [2025-09-08 08:37:11][351161649780017][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:37:11][351161649780017][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:37:11][351161649780017][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:37:11][351161649780017][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:37:11][351161649780017][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:37:11][351161649780017][404 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:37:11][351161649780017][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351161649780017\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7858\"}'\'' -e'"" [2025-09-08 08:37:11][351161649780017][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:37:11][351161649780017][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351161649780017\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7858\"}'\'' -e'"" [2025-09-08 08:37:16][351161649780017][6043 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42839bd7-58f0-41a2-b3b3-f12cf07870b4","id":"QR_42839bd7-58f0-41a2-b3b3-f12cf07870b4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:37:16][351161649780017][6199 ms][DEBUG] proc_open done in 5795 ms; code=255; res.len=3343 [2025-09-08 08:37:16][351161649780017][6199 ms][DEBUG] END runCmdUntilRes#1 in 5795 ms [2025-09-08 08:37:16][351161649780017][6199 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:41:03][356647184203527][1 ms][INFO] === Request start === [2025-09-08 08:41:03][356647184203527][1 ms][DEBUG] START check_scloud [2025-09-08 08:41:03][356647184203527][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:41:03][356647184203527][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 31352 18092 24250964 182872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:41:03][356647184203527][309 ms][DEBUG] targetPkg: running [2025-09-08 08:41:03][356647184203527][310 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 08:41:03][356647184203527][310 ms][DEBUG] START check_boot_completed [2025-09-08 08:41:03][356647184203527][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:41:03][356647184203527][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:41:03][356647184203527][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:41:03][356647184203527][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:41:03][356647184203527][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 08:41:03][356647184203527][403 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:41:03][356647184203527][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356647184203527\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1617\"}'\'' -e'"" [2025-09-08 08:41:03][356647184203527][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:41:03][356647184203527][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356647184203527\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1617\"}'\'' -e'"" [2025-09-08 08:41:08][356647184203527][5495 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ad56661-a029-4f0e-a1ad-d88f67163c7c","id":"QR_7ad56661-a029-4f0e-a1ad-d88f67163c7c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:41:09][356647184203527][5652 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-08 08:41:09][356647184203527][5652 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-08 08:41:09][356647184203527][5652 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:41:11][356414817541462][0 ms][INFO] === Request start === [2025-09-08 08:41:11][356414817541462][1 ms][DEBUG] START check_scloud [2025-09-08 08:41:11][356414817541462][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:41:11][356414817541462][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 31352 18092 24401628 192944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:41:11][356414817541462][310 ms][DEBUG] targetPkg: running [2025-09-08 08:41:11][356414817541462][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 08:41:11][356414817541462][310 ms][DEBUG] START check_boot_completed [2025-09-08 08:41:11][356414817541462][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:41:11][356414817541462][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:41:11][356414817541462][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:41:11][356414817541462][404 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 08:41:11][356414817541462][404 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 08:41:11][356414817541462][405 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:41:11][356414817541462][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817541462\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7833\"}'\'' -e'"" [2025-09-08 08:41:11][356414817541462][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:41:11][356414817541462][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817541462\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7833\"}'\'' -e'"" [2025-09-08 08:41:14][356414817541462][3715 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e8f6a59-acdc-4d61-ac02-a9f24cccb2e6","id":"QR_6e8f6a59-acdc-4d61-ac02-a9f24cccb2e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:41:14][356414817541462][3871 ms][DEBUG] proc_open done in 3466 ms; code=255; res.len=3343 [2025-09-08 08:41:14][356414817541462][3871 ms][DEBUG] END runCmdUntilRes#1 in 3466 ms [2025-09-08 08:41:14][356414817541462][3871 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:41:17][356414817541462][0 ms][INFO] === Request start === [2025-09-08 08:41:17][356414817541462][1 ms][DEBUG] START check_scloud [2025-09-08 08:41:17][356414817541462][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:41:17][356414817541462][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 31352 18092 24560100 196208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:41:17][356414817541462][316 ms][DEBUG] targetPkg: running [2025-09-08 08:41:17][356414817541462][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 08:41:17][356414817541462][316 ms][DEBUG] START check_boot_completed [2025-09-08 08:41:17][356414817541462][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:41:17][356414817541462][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 08:41:17][356414817541462][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:41:17][356414817541462][396 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 08:41:17][356414817541462][396 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-08 08:41:17][356414817541462][396 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:41:17][356414817541462][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817541462\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5150\"}'\'' -e'"" [2025-09-08 08:41:17][356414817541462][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:41:17][356414817541462][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817541462\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5150\"}'\'' -e'"" [2025-09-08 08:41:22][356414817541462][5534 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0fdcf73-1d88-40de-a049-c8b709304b82","id":"QR_a0fdcf73-1d88-40de-a049-c8b709304b82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:41:23][356414817541462][5690 ms][DEBUG] proc_open done in 5294 ms; code=255; res.len=3343 [2025-09-08 08:41:23][356414817541462][5690 ms][DEBUG] END runCmdUntilRes#1 in 5294 ms [2025-09-08 08:41:23][356414817541462][5690 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:43:03][358799696678718][0 ms][INFO] === Request start === [2025-09-08 08:43:03][358799696678718][1 ms][DEBUG] START check_scloud [2025-09-08 08:43:03][358799696678718][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:43:04][358799696678718][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 31352 18092 24657536 207364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:43:04][358799696678718][263 ms][DEBUG] targetPkg: running [2025-09-08 08:43:04][358799696678718][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-08 08:43:04][358799696678718][263 ms][DEBUG] START check_boot_completed [2025-09-08 08:43:04][358799696678718][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:43:04][358799696678718][310 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:43:04][358799696678718][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:43:04][358799696678718][372 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 08:43:04][358799696678718][372 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:43:04][358799696678718][372 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:43:04][358799696678718][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799696678718\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9363\"}'\'' -e'"" [2025-09-08 08:43:04][358799696678718][372 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:43:04][358799696678718][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799696678718\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9363\"}'\'' -e'"" [2025-09-08 08:43:09][358799696678718][5277 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8b7bea2-cc25-43ac-90e5-92faf4581c95","id":"QR_d8b7bea2-cc25-43ac-90e5-92faf4581c95","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:43:09][358799696678718][5433 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-08 08:43:09][358799696678718][5433 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-09-08 08:43:09][358799696678718][5434 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:43:11][358799696678718][1 ms][INFO] === Request start === [2025-09-08 08:43:11][358799696678718][1 ms][DEBUG] START check_scloud [2025-09-08 08:43:11][358799696678718][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:43:12][358799696678718][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 31352 18092 24787720 215692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:43:12][358799696678718][291 ms][DEBUG] targetPkg: running [2025-09-08 08:43:12][358799696678718][292 ms][DEBUG] END check_scloud in 290 ms [2025-09-08 08:43:12][358799696678718][292 ms][DEBUG] START check_boot_completed [2025-09-08 08:43:12][358799696678718][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:43:12][358799696678718][338 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:43:12][358799696678718][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:43:12][358799696678718][401 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 08:43:12][358799696678718][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:43:12][358799696678718][401 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:43:12][358799696678718][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799696678718\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5804\"}'\'' -e'"" [2025-09-08 08:43:12][358799696678718][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:43:12][358799696678718][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799696678718\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5804\"}'\'' -e'"" [2025-09-08 08:43:17][358799696678718][5493 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_577992b6-0d6e-4150-8f42-8af109d19808","id":"QR_577992b6-0d6e-4150-8f42-8af109d19808","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:43:17][358799696678718][5649 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-08 08:43:17][358799696678718][5649 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-08 08:43:17][358799696678718][5649 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:45:04][356241329652176][0 ms][INFO] === Request start === [2025-09-08 08:45:04][356241329652176][1 ms][DEBUG] START check_scloud [2025-09-08 08:45:04][356241329652176][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:45:05][356241329652176][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 31352 18092 24917060 223252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:45:05][356241329652176][306 ms][DEBUG] targetPkg: running [2025-09-08 08:45:05][356241329652176][306 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 08:45:05][356241329652176][307 ms][DEBUG] START check_boot_completed [2025-09-08 08:45:05][356241329652176][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:45:05][356241329652176][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:45:05][356241329652176][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:45:05][356241329652176][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:45:05][356241329652176][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:45:05][356241329652176][400 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:45:05][356241329652176][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241329652176\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1974\"}'\'' -e'"" [2025-09-08 08:45:05][356241329652176][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:45:05][356241329652176][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241329652176\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1974\"}'\'' -e'"" [2025-09-08 08:45:09][356241329652176][4430 ms][DEBUG] proc_open done in 4030 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 08:45:09][356241329652176][4430 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-08 08:45:09][356241329652176][4430 ms][WARN] Detected error: Process with pid 31352 either refused to load frida-agent, or terminated during injectionProcess with pid 31352 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 08:45:09][356241329652176][4430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 08:45:09][356241329652176][4696 ms][DEBUG] SU: done in 266 ms; outsystem 18326 18092 12647556 242176 ep_poll 0 S system_server\n [2025-09-08 08:45:09][356241329652176][4696 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 08:45:09][356241329652176][4836 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 08:45:09][356241329652176][4836 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 08:45:09][356241329652176][4836 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 08:45:09][356241329652176][4977 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 08:45:09][356241329652176][4977 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 08:45:10][356241329652176][5164 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 08:45:12][356241329652176][7179 ms][DEBUG] START check_boot_completed [2025-09-08 08:45:12][356241329652176][7179 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:45:12][356241329652176][7226 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:45:12][356241329652176][7226 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:45:12][356241329652176][7273 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:45:12][356241329652176][7273 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 08:45:15][356241329652176][10288 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 08:45:15][356241329652176][10288 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241329652176\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1974\"}'\'' -e'"" [2025-09-08 08:45:20][356241329652176][15849 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e562ddcc-912a-46a2-aa23-87ec0d9d27b5","id":"QR_e562ddcc-912a-46a2-aa23-87ec0d9d27b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:45:20][356241329652176][16006 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-08 08:45:20][356241329652176][16006 ms][DEBUG] END runCmdUntilRes#2 in 5718 ms [2025-09-08 08:45:20][356241329652176][16006 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:47:03][357962505343343][1 ms][INFO] === Request start === [2025-09-08 08:47:03][357962505343343][1 ms][DEBUG] START check_scloud [2025-09-08 08:47:03][357962505343343][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:47:04][357962505343343][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 32756 18092 23602072 127224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:47:04][357962505343343][315 ms][DEBUG] targetPkg: running [2025-09-08 08:47:04][357962505343343][316 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 08:47:04][357962505343343][316 ms][DEBUG] START check_boot_completed [2025-09-08 08:47:04][357962505343343][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:47:04][357962505343343][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:47:04][357962505343343][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:47:04][357962505343343][411 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 08:47:04][357962505343343][411 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 08:47:04][357962505343343][411 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:47:04][357962505343343][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505343343\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4938\"}'\'' -e'"" [2025-09-08 08:47:04][357962505343343][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:47:04][357962505343343][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505343343\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4938\"}'\'' -e'"" [2025-09-08 08:47:08][357962505343343][4939 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7663b266-f419-431b-bab4-2a936a84f4a5","id":"QR_7663b266-f419-431b-bab4-2a936a84f4a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:47:08][357962505343343][5095 ms][DEBUG] proc_open done in 4684 ms; code=255; res.len=3343 [2025-09-08 08:47:08][357962505343343][5095 ms][DEBUG] END runCmdUntilRes#1 in 4684 ms [2025-09-08 08:47:08][357962505343343][5095 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:47:11][357962505343343][0 ms][INFO] === Request start === [2025-09-08 08:47:11][357962505343343][1 ms][DEBUG] START check_scloud [2025-09-08 08:47:11][357962505343343][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:47:11][357962505343343][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 32756 18092 23710484 138360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:47:11][357962505343343][275 ms][DEBUG] targetPkg: running [2025-09-08 08:47:11][357962505343343][275 ms][DEBUG] END check_scloud in 275 ms [2025-09-08 08:47:11][357962505343343][275 ms][DEBUG] START check_boot_completed [2025-09-08 08:47:11][357962505343343][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:47:11][357962505343343][322 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:47:11][357962505343343][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:47:11][357962505343343][369 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:47:11][357962505343343][369 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:47:11][357962505343343][369 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:47:11][357962505343343][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505343343\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4359\"}'\'' -e'"" [2025-09-08 08:47:11][357962505343343][369 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:47:11][357962505343343][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505343343\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4359\"}'\'' -e'"" [2025-09-08 08:47:16][357962505343343][5289 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_169cc18f-53dc-4090-b39c-ed243247b243","id":"QR_169cc18f-53dc-4090-b39c-ed243247b243","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:47:16][357962505343343][5446 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-09-08 08:47:16][357962505343343][5446 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-08 08:47:16][357962505343343][5446 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:50:03][357040734882108][1 ms][INFO] === Request start === [2025-09-08 08:50:03][357040734882108][1 ms][DEBUG] START check_scloud [2025-09-08 08:50:03][357040734882108][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:50:03][357040734882108][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 32756 18092 23842124 149956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:50:03][357040734882108][316 ms][DEBUG] targetPkg: running [2025-09-08 08:50:03][357040734882108][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 08:50:03][357040734882108][316 ms][DEBUG] START check_boot_completed [2025-09-08 08:50:03][357040734882108][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:50:03][357040734882108][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 08:50:03][357040734882108][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:50:03][357040734882108][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:50:03][357040734882108][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 08:50:03][357040734882108][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:50:03][357040734882108][504 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1516\nsuccessfulTxPacketsPerSecond: 0.4583978485860973\nretriedTxPackets: 396\nretriedTxPacketsPerSecond: 0.14600820362371988\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1471\nsuccessfulRxPacketsPerSecond: 0.38369597696465924\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:50:03][357040734882108][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:50:05][357040734882108][1956 ms][DEBUG] SU: done in 1452 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.415/203.415/203.415/0.000 ms\n [2025-09-08 08:50:05][357040734882108][1956 ms][DEBUG] check_internet: online [2025-09-08 08:50:05][357040734882108][1956 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:50:05][357040734882108][1957 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040734882108\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4272\"}'\'' -e'"" [2025-09-08 08:50:05][357040734882108][1957 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:50:05][357040734882108][1957 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040734882108\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4272\"}'\'' -e'"" [2025-09-08 08:50:09][357040734882108][6002 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_281474ee-09be-41dd-8c01-4403f3084e29","id":"QR_281474ee-09be-41dd-8c01-4403f3084e29","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:50:09][357040734882108][6158 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-09-08 08:50:09][357040734882108][6158 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-09-08 08:50:09][357040734882108][6158 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:50:11][357040734882108][0 ms][INFO] === Request start === [2025-09-08 08:50:11][357040734882108][1 ms][DEBUG] START check_scloud [2025-09-08 08:50:11][357040734882108][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:50:12][357040734882108][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 32756 18092 23992916 160972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:50:12][357040734882108][268 ms][DEBUG] targetPkg: running [2025-09-08 08:50:12][357040734882108][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-08 08:50:12][357040734882108][268 ms][DEBUG] START check_boot_completed [2025-09-08 08:50:12][357040734882108][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:50:12][357040734882108][299 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 08:50:12][357040734882108][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:50:12][357040734882108][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:50:12][357040734882108][346 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 08:50:12][357040734882108][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:50:12][357040734882108][456 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1516\nsuccessfulTxPacketsPerSecond: 0.4583978485860973\nretriedTxPackets: 396\nretriedTxPacketsPerSecond: 0.14600820362371988\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1471\nsuccessfulRxPacketsPerSecond: 0.38369597696465924\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:50:12][357040734882108][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:50:12][357040734882108][799 ms][DEBUG] SU: done in 343 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=234 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 234.149/234.149/234.149/0.000 ms\n [2025-09-08 08:50:12][357040734882108][799 ms][DEBUG] check_internet: online [2025-09-08 08:50:12][357040734882108][799 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:50:12][357040734882108][799 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040734882108\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8432\"}'\'' -e'"" [2025-09-08 08:50:12][357040734882108][800 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:50:12][357040734882108][800 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040734882108\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8432\"}'\'' -e'"" [2025-09-08 08:50:17][357040734882108][5845 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f53fb8f5-fb25-4aac-85d3-6cca2a015e23","id":"QR_f53fb8f5-fb25-4aac-85d3-6cca2a015e23","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:50:17][357040734882108][6001 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-08 08:50:17][357040734882108][6001 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-08 08:50:17][357040734882108][6001 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:54:03][350356674928082][1 ms][INFO] === Request start === [2025-09-08 08:54:03][350356674928082][1 ms][DEBUG] START check_scloud [2025-09-08 08:54:03][350356674928082][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:54:03][350356674928082][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 32756 18092 24104660 172100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:54:03][350356674928082][273 ms][DEBUG] targetPkg: running [2025-09-08 08:54:03][350356674928082][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-08 08:54:03][350356674928082][274 ms][DEBUG] START check_boot_completed [2025-09-08 08:54:03][350356674928082][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:54:03][350356674928082][305 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 08:54:03][350356674928082][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:54:03][350356674928082][353 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 08:54:03][350356674928082][353 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-08 08:54:03][350356674928082][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:54:03][350356674928082][461 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1602\nsuccessfulTxPacketsPerSecond: 0.2793604594505045\nretriedTxPackets: 429\nretriedTxPacketsPerSecond: 0.10719645537054241\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1542\nsuccessfulRxPacketsPerSecond: 0.23063479791843974\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:54:03][350356674928082][461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:54:04][350356674928082][774 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.950/199.950/199.950/0.000 ms\n [2025-09-08 08:54:04][350356674928082][774 ms][DEBUG] check_internet: online [2025-09-08 08:54:04][350356674928082][774 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:54:04][350356674928082][774 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356674928082\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4926\"}'\'' -e'"" [2025-09-08 08:54:04][350356674928082][774 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:54:04][350356674928082][774 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356674928082\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4926\"}'\'' -e'"" [2025-09-08 08:54:08][350356674928082][4882 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_590527c8-dcaf-457b-b1e6-b663357c9a6e","id":"QR_590527c8-dcaf-457b-b1e6-b663357c9a6e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:54:08][350356674928082][5038 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-09-08 08:54:08][350356674928082][5038 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-09-08 08:54:08][350356674928082][5038 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:54:10][350356674928082][0 ms][INFO] === Request start === [2025-09-08 08:54:10][350356674928082][1 ms][DEBUG] START check_scloud [2025-09-08 08:54:10][350356674928082][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:54:10][350356674928082][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 32756 18092 24267676 183952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:54:10][350356674928082][285 ms][DEBUG] targetPkg: running [2025-09-08 08:54:10][350356674928082][285 ms][DEBUG] END check_scloud in 285 ms [2025-09-08 08:54:10][350356674928082][285 ms][DEBUG] START check_boot_completed [2025-09-08 08:54:10][350356674928082][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:54:10][350356674928082][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:54:10][350356674928082][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:54:11][350356674928082][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:54:11][350356674928082][379 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:54:11][350356674928082][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:54:11][350356674928082][504 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1602\nsuccessfulTxPacketsPerSecond: 0.2793604594505045\nretriedTxPackets: 429\nretriedTxPacketsPerSecond: 0.10719645537054241\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1542\nsuccessfulRxPacketsPerSecond: 0.23063479791843974\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:54:11][350356674928082][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:54:11][350356674928082][754 ms][DEBUG] SU: done in 250 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.071/164.071/164.071/0.000 ms\n [2025-09-08 08:54:11][350356674928082][754 ms][DEBUG] check_internet: online [2025-09-08 08:54:11][350356674928082][754 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:54:11][350356674928082][754 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356674928082\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7827\"}'\'' -e'"" [2025-09-08 08:54:11][350356674928082][754 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:54:11][350356674928082][754 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356674928082\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7827\"}'\'' -e'"" [2025-09-08 08:54:16][350356674928082][5955 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2921d74b-e75a-46a3-99f4-38abb3facc02","id":"QR_2921d74b-e75a-46a3-99f4-38abb3facc02","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:54:16][350356674928082][6112 ms][DEBUG] proc_open done in 5358 ms; code=255; res.len=3343 [2025-09-08 08:54:16][350356674928082][6112 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-09-08 08:54:16][350356674928082][6112 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:54:20][356006790709627][0 ms][INFO] === Request start === [2025-09-08 08:54:20][356006790709627][1 ms][DEBUG] START check_scloud [2025-09-08 08:54:20][356006790709627][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:54:21][356006790709627][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 32756 18092 24410276 194440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:54:21][356006790709627][324 ms][DEBUG] targetPkg: running [2025-09-08 08:54:21][356006790709627][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-08 08:54:21][356006790709627][324 ms][DEBUG] START check_boot_completed [2025-09-08 08:54:21][356006790709627][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:54:21][356006790709627][370 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:54:21][356006790709627][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:54:21][356006790709627][418 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:54:21][356006790709627][418 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 08:54:21][356006790709627][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:54:21][356006790709627][558 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1602\nsuccessfulTxPacketsPerSecond: 0.2793604594505045\nretriedTxPackets: 429\nretriedTxPacketsPerSecond: 0.10719645537054241\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1542\nsuccessfulRxPacketsPerSecond: 0.23063479791843974\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:54:21][356006790709627][558 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:54:21][356006790709627][949 ms][DEBUG] SU: done in 391 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=279 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 279.827/279.827/279.827/0.000 ms\n [2025-09-08 08:54:21][356006790709627][949 ms][DEBUG] check_internet: online [2025-09-08 08:54:21][356006790709627][949 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:54:21][356006790709627][949 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356006790709627\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8888\"}'\'' -e'"" [2025-09-08 08:54:21][356006790709627][949 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:54:21][356006790709627][949 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356006790709627\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8888\"}'\'' -e'"" [2025-09-08 08:54:25][356006790709627][4291 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb71e97f-7701-4c9d-a11a-325271a2ca09","id":"QR_eb71e97f-7701-4c9d-a11a-325271a2ca09","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:54:25][356006790709627][4447 ms][DEBUG] proc_open done in 3498 ms; code=255; res.len=3343 [2025-09-08 08:54:25][356006790709627][4447 ms][DEBUG] END runCmdUntilRes#1 in 3498 ms [2025-09-08 08:54:25][356006790709627][4448 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:54:27][356006790709627][0 ms][INFO] === Request start === [2025-09-08 08:54:27][356006790709627][1 ms][DEBUG] START check_scloud [2025-09-08 08:54:27][356006790709627][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:54:27][356006790709627][280 ms][DEBUG] SU: done in 280 ms; outu0_a118 32756 18092 24556680 206072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:54:27][356006790709627][281 ms][DEBUG] targetPkg: running [2025-09-08 08:54:27][356006790709627][281 ms][DEBUG] END check_scloud in 280 ms [2025-09-08 08:54:27][356006790709627][281 ms][DEBUG] START check_boot_completed [2025-09-08 08:54:27][356006790709627][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:54:28][356006790709627][326 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 08:54:28][356006790709627][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:54:28][356006790709627][389 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 08:54:28][356006790709627][389 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 08:54:28][356006790709627][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:54:28][356006790709627][529 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1602\nsuccessfulTxPacketsPerSecond: 0.2793604594505045\nretriedTxPackets: 429\nretriedTxPacketsPerSecond: 0.10719645537054241\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1542\nsuccessfulRxPacketsPerSecond: 0.23063479791843974\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:54:28][356006790709627][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:54:28][356006790709627][828 ms][DEBUG] SU: done in 298 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.953/194.953/194.953/0.000 ms\n [2025-09-08 08:54:28][356006790709627][828 ms][DEBUG] check_internet: online [2025-09-08 08:54:28][356006790709627][828 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:54:28][356006790709627][828 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356006790709627\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6501\"}'\'' -e'"" [2025-09-08 08:54:28][356006790709627][828 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:54:28][356006790709627][828 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356006790709627\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6501\"}'\'' -e'"" [2025-09-08 08:54:33][356006790709627][5575 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06e5e843-7e2f-473b-9bf3-0aae6631790b","id":"QR_06e5e843-7e2f-473b-9bf3-0aae6631790b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:54:33][356006790709627][5731 ms][DEBUG] proc_open done in 4903 ms; code=255; res.len=3343 [2025-09-08 08:54:33][356006790709627][5731 ms][DEBUG] END runCmdUntilRes#1 in 4903 ms [2025-09-08 08:54:33][356006790709627][5731 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:58:04][353204331051608][1 ms][INFO] === Request start === [2025-09-08 08:58:04][353204331051608][1 ms][DEBUG] START check_scloud [2025-09-08 08:58:04][353204331051608][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:58:05][353204331051608][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 32756 18092 24675648 165032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:58:05][353204331051608][315 ms][DEBUG] targetPkg: running [2025-09-08 08:58:05][353204331051608][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 08:58:05][353204331051608][315 ms][DEBUG] START check_boot_completed [2025-09-08 08:58:05][353204331051608][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:58:05][353204331051608][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:58:05][353204331051608][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:58:05][353204331051608][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:58:05][353204331051608][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:58:05][353204331051608][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:58:05][353204331051608][533 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1705\nsuccessfulTxPacketsPerSecond: 0.4386712095400341\nretriedTxPackets: 460\nretriedTxPacketsPerSecond: 0.13202725724020442\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1632\nsuccessfulRxPacketsPerSecond: 0.3833049403747871\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:58:05][353204331051608][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:58:06][353204331051608][1814 ms][DEBUG] SU: done in 1281 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.677/201.677/201.677/0.000 ms\n [2025-09-08 08:58:06][353204331051608][1814 ms][DEBUG] check_internet: online [2025-09-08 08:58:06][353204331051608][1814 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:58:06][353204331051608][1814 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204331051608\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2213\"}'\'' -e'"" [2025-09-08 08:58:06][353204331051608][1815 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:58:06][353204331051608][1815 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204331051608\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2213\"}'\'' -e'"" [2025-09-08 08:58:10][353204331051608][5563 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 08:58:10][353204331051608][5719 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=107 [2025-09-08 08:58:10][353204331051608][5719 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-08 08:58:10][353204331051608][5719 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 08:58:10][][0 ms][INFO] === Request start === [2025-09-08 08:58:10][][1 ms][DEBUG] START check_scloud [2025-09-08 08:58:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:58:11][][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 32756 18092 24814156 146264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:58:11][][294 ms][DEBUG] targetPkg: running [2025-09-08 08:58:11][][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-08 08:58:11][][294 ms][DEBUG] START check_boot_completed [2025-09-08 08:58:11][][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:58:11][][340 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 08:58:11][][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:58:11][][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:58:11][][387 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 08:58:11][][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:58:11][][498 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1705\nsuccessfulTxPacketsPerSecond: 0.4386712095400341\nretriedTxPackets: 460\nretriedTxPacketsPerSecond: 0.13202725724020442\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1632\nsuccessfulRxPacketsPerSecond: 0.3833049403747871\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:58:11][][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:58:11][][778 ms][DEBUG] SU: done in 280 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.303/164.303/164.303/0.000 ms\n [2025-09-08 08:58:11][][778 ms][DEBUG] check_internet: online [2025-09-08 08:58:11][][778 ms][DEBUG] rawBody.length=1131 [2025-09-08 08:58:11][][778 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW304C0ZH\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6586\"}'\'' -e'"" [2025-09-08 08:58:11][][778 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:58:11][][778 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW304C0ZH\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6586\"}'\'' -e'"" [2025-09-08 08:58:15][][4511 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 08:58:15][][4667 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=107 [2025-09-08 08:58:15][][4667 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-08 08:58:15][][4667 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 08:58:17][353204331051608][0 ms][INFO] === Request start === [2025-09-08 08:58:17][353204331051608][1 ms][DEBUG] START check_scloud [2025-09-08 08:58:17][353204331051608][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:58:17][353204331051608][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 32756 18092 24982356 155888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:58:17][353204331051608][316 ms][DEBUG] targetPkg: running [2025-09-08 08:58:17][353204331051608][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 08:58:17][353204331051608][316 ms][DEBUG] START check_boot_completed [2025-09-08 08:58:17][353204331051608][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:58:17][353204331051608][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:58:17][353204331051608][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:58:17][353204331051608][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 08:58:17][353204331051608][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 08:58:17][353204331051608][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 08:58:17][353204331051608][566 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1705\nsuccessfulTxPacketsPerSecond: 0.4386712095400341\nretriedTxPackets: 460\nretriedTxPacketsPerSecond: 0.13202725724020442\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1632\nsuccessfulRxPacketsPerSecond: 0.3833049403747871\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 08:58:17][353204331051608][566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 08:58:18][353204331051608][878 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=206 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 206.320/206.320/206.320/0.000 ms\n [2025-09-08 08:58:18][353204331051608][878 ms][DEBUG] check_internet: online [2025-09-08 08:58:18][353204331051608][878 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:58:18][353204331051608][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204331051608\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7407\"}'\'' -e'"" [2025-09-08 08:58:18][353204331051608][879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:58:18][353204331051608][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204331051608\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7407\"}'\'' -e'"" [2025-09-08 08:58:22][353204331051608][4877 ms][DEBUG] proc_open done in 3999 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 08:58:22][353204331051608][4877 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-08 08:58:22][353204331051608][4877 ms][WARN] Detected error: Process with pid 32756 either refused to load frida-agent, or terminated during injectionProcess with pid 32756 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 08:58:22][353204331051608][4877 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 08:58:22][353204331051608][5127 ms][DEBUG] SU: done in 250 ms; outsystem 18326 18092 12767688 231660 ep_poll 0 S system_server\n [2025-09-08 08:58:22][353204331051608][5127 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 08:58:22][353204331051608][5268 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 08:58:22][353204331051608][5268 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 08:58:22][353204331051608][5268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 08:58:22][353204331051608][5393 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 08:58:22][353204331051608][5393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 08:58:22][353204331051608][5596 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 08:58:24][353204331051608][7611 ms][DEBUG] START check_boot_completed [2025-09-08 08:58:24][353204331051608][7611 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:58:24][353204331051608][7658 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 08:58:24][353204331051608][7658 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:58:24][353204331051608][7736 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 08:58:24][353204331051608][7736 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 08:58:27][353204331051608][10751 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 08:58:27][353204331051608][10751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204331051608\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7407\"}'\'' -e'"" [2025-09-08 08:58:32][353204331051608][15750 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c21e7bbd-c5be-44ea-8e0d-c9140d1aa358","id":"QR_c21e7bbd-c5be-44ea-8e0d-c9140d1aa358","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:58:33][353204331051608][15906 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3343 [2025-09-08 08:58:33][353204331051608][15906 ms][DEBUG] END runCmdUntilRes#2 in 5155 ms [2025-09-08 08:58:33][353204331051608][15906 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:59:03][353499868581445][0 ms][INFO] === Request start === [2025-09-08 08:59:03][353499868581445][1 ms][DEBUG] START check_scloud [2025-09-08 08:59:03][353499868581445][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:59:04][353499868581445][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 3154 18092 23564696 128132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:59:04][353499868581445][318 ms][DEBUG] targetPkg: running [2025-09-08 08:59:04][353499868581445][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 08:59:04][353499868581445][318 ms][DEBUG] START check_boot_completed [2025-09-08 08:59:04][353499868581445][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:59:04][353499868581445][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 08:59:04][353499868581445][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:59:04][353499868581445][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:59:04][353499868581445][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 08:59:04][353499868581445][396 ms][DEBUG] rawBody.length=1150 [2025-09-08 08:59:04][353499868581445][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353499868581445\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5860\"}'\'' -e'"" [2025-09-08 08:59:04][353499868581445][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:59:04][353499868581445][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353499868581445\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5860\"}'\'' -e'"" [2025-09-08 08:59:07][353499868581445][3879 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd72c772-9897-472e-af1d-f1459ad63b3a","id":"QR_bd72c772-9897-472e-af1d-f1459ad63b3a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:59:07][353499868581445][4036 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=3343 [2025-09-08 08:59:07][353499868581445][4036 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-09-08 08:59:07][353499868581445][4036 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 08:59:10][353499868581445][0 ms][INFO] === Request start === [2025-09-08 08:59:10][353499868581445][1 ms][DEBUG] START check_scloud [2025-09-08 08:59:10][353499868581445][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 08:59:10][353499868581445][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 3154 18092 23702232 139112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 08:59:10][353499868581445][299 ms][DEBUG] targetPkg: running [2025-09-08 08:59:10][353499868581445][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 08:59:10][353499868581445][299 ms][DEBUG] START check_boot_completed [2025-09-08 08:59:10][353499868581445][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 08:59:10][353499868581445][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 08:59:10][353499868581445][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 08:59:10][353499868581445][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 08:59:10][353499868581445][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 08:59:10][353499868581445][377 ms][DEBUG] rawBody.length=1160 [2025-09-08 08:59:10][353499868581445][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353499868581445\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5054\"}'\'' -e'"" [2025-09-08 08:59:10][353499868581445][377 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 08:59:10][353499868581445][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353499868581445\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5054\"}'\'' -e'"" [2025-09-08 08:59:15][353499868581445][5142 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b20747b5-103c-4447-9ecb-0b2d31e532cf","id":"QR_b20747b5-103c-4447-9ecb-0b2d31e532cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 08:59:15][353499868581445][5298 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-09-08 08:59:15][353499868581445][5298 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-08 08:59:15][353499868581445][5298 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:01:03][357962507645760][1 ms][INFO] === Request start === [2025-09-08 09:01:03][357962507645760][1 ms][DEBUG] START check_scloud [2025-09-08 09:01:03][357962507645760][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:01:03][357962507645760][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 3154 18092 23783172 150704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:01:03][357962507645760][301 ms][DEBUG] targetPkg: running [2025-09-08 09:01:03][357962507645760][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-08 09:01:03][357962507645760][302 ms][DEBUG] START check_boot_completed [2025-09-08 09:01:03][357962507645760][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:01:03][357962507645760][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:01:03][357962507645760][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:01:03][357962507645760][396 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 09:01:03][357962507645760][396 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 09:01:03][357962507645760][396 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:01:03][357962507645760][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507645760\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6848\"}'\'' -e'"" [2025-09-08 09:01:03][357962507645760][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:01:03][357962507645760][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507645760\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6848\"}'\'' -e'"" [2025-09-08 09:01:08][357962507645760][4831 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc37470e-a4e8-4ccd-a1d6-4983cf28359f","id":"QR_bc37470e-a4e8-4ccd-a1d6-4983cf28359f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:01:08][357962507645760][4987 ms][DEBUG] proc_open done in 4591 ms; code=255; res.len=3343 [2025-09-08 09:01:08][357962507645760][4988 ms][DEBUG] END runCmdUntilRes#1 in 4591 ms [2025-09-08 09:01:08][357962507645760][4988 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:01:10][357962507645760][0 ms][INFO] === Request start === [2025-09-08 09:01:10][357962507645760][1 ms][DEBUG] START check_scloud [2025-09-08 09:01:10][357962507645760][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:01:11][357962507645760][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 3154 18092 23907212 160196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:01:11][357962507645760][308 ms][DEBUG] targetPkg: running [2025-09-08 09:01:11][357962507645760][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 09:01:11][357962507645760][308 ms][DEBUG] START check_boot_completed [2025-09-08 09:01:11][357962507645760][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:01:11][357962507645760][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:01:11][357962507645760][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:01:11][357962507645760][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:01:11][357962507645760][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:01:11][357962507645760][401 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:01:11][357962507645760][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507645760\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1402\"}'\'' -e'"" [2025-09-08 09:01:11][357962507645760][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:01:11][357962507645760][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507645760\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1402\"}'\'' -e'"" [2025-09-08 09:01:16][357962507645760][5556 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11dd8057-1c07-456e-b2e8-1877c42128ed","id":"QR_11dd8057-1c07-456e-b2e8-1877c42128ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:01:16][357962507645760][5713 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 09:01:16][357962507645760][5713 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 09:01:16][357962507645760][5713 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:01:20][358550730966068][0 ms][INFO] === Request start === [2025-09-08 09:01:20][358550730966068][1 ms][DEBUG] START check_scloud [2025-09-08 09:01:20][358550730966068][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:01:21][358550730966068][290 ms][DEBUG] SU: done in 290 ms; outu0_a118 3154 18092 24088468 171868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:01:21][358550730966068][291 ms][DEBUG] targetPkg: running [2025-09-08 09:01:21][358550730966068][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-08 09:01:21][358550730966068][291 ms][DEBUG] START check_boot_completed [2025-09-08 09:01:21][358550730966068][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:01:21][358550730966068][337 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:01:21][358550730966068][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:01:21][358550730966068][400 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 09:01:21][358550730966068][400 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 09:01:21][358550730966068][400 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:01:21][358550730966068][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358550730966068\",\"model\":\"SM-M225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SLK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4154\"}'\'' -e'"" [2025-09-08 09:01:21][358550730966068][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:01:21][358550730966068][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358550730966068\",\"model\":\"SM-M225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SLK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4154\"}'\'' -e'"" [2025-09-08 09:01:24][358550730966068][3977 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_777b272c-0015-43e0-a044-ef8dfa23ac15","id":"QR_777b272c-0015-43e0-a044-ef8dfa23ac15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:01:24][358550730966068][4133 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-08 09:01:24][358550730966068][4133 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-08 09:01:24][358550730966068][4133 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:01:27][358550730966068][0 ms][INFO] === Request start === [2025-09-08 09:01:27][358550730966068][1 ms][DEBUG] START check_scloud [2025-09-08 09:01:27][358550730966068][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:01:27][358550730966068][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 3154 18092 24226936 182848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:01:27][358550730966068][256 ms][DEBUG] targetPkg: running [2025-09-08 09:01:27][358550730966068][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-08 09:01:27][358550730966068][256 ms][DEBUG] START check_boot_completed [2025-09-08 09:01:27][358550730966068][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:01:27][358550730966068][302 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:01:27][358550730966068][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:01:27][358550730966068][365 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 09:01:27][358550730966068][365 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 09:01:27][358550730966068][365 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:01:27][358550730966068][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358550730966068\",\"model\":\"SM-M225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SLK\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7256\"}'\'' -e'"" [2025-09-08 09:01:27][358550730966068][365 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:01:27][358550730966068][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358550730966068\",\"model\":\"SM-M225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SLK\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7256\"}'\'' -e'"" [2025-09-08 09:01:32][358550730966068][5348 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e16a970-5740-4eb9-8cd5-5cc79a9d15bf","id":"QR_0e16a970-5740-4eb9-8cd5-5cc79a9d15bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:01:32][358550730966068][5504 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-08 09:01:32][358550730966068][5504 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-09-08 09:01:32][358550730966068][5504 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:02:03][351104340125835][0 ms][INFO] === Request start === [2025-09-08 09:02:03][351104340125835][1 ms][DEBUG] START check_scloud [2025-09-08 09:02:03][351104340125835][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:02:03][351104340125835][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 3154 18092 24301844 193416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:02:03][351104340125835][288 ms][DEBUG] targetPkg: running [2025-09-08 09:02:03][351104340125835][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-08 09:02:03][351104340125835][288 ms][DEBUG] START check_boot_completed [2025-09-08 09:02:03][351104340125835][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:02:03][351104340125835][334 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:02:03][351104340125835][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:02:03][351104340125835][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:02:03][351104340125835][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 09:02:03][351104340125835][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:02:03][351104340125835][506 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2021\nsuccessfulTxPacketsPerSecond: 1.0281438099886124\nretriedTxPackets: 536\nretriedTxPacketsPerSecond: 0.247275093541565\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1889\nsuccessfulRxPacketsPerSecond: 0.8361802505287131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:02:03][351104340125835][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:02:03][351104340125835][882 ms][DEBUG] SU: done in 376 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.013/249.013/249.013/0.000 ms\n [2025-09-08 09:02:03][351104340125835][882 ms][DEBUG] check_internet: online [2025-09-08 09:02:03][351104340125835][882 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:02:03][351104340125835][882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104340125835\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4383\"}'\'' -e'"" [2025-09-08 09:02:03][351104340125835][883 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:02:03][351104340125835][883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104340125835\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4383\"}'\'' -e'"" [2025-09-08 09:02:07][351104340125835][4193 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_587b4603-3829-41c1-b58e-127dbb6e725a","id":"QR_587b4603-3829-41c1-b58e-127dbb6e725a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:02:07][351104340125835][4349 ms][DEBUG] proc_open done in 3466 ms; code=255; res.len=3343 [2025-09-08 09:02:07][351104340125835][4349 ms][DEBUG] END runCmdUntilRes#1 in 3466 ms [2025-09-08 09:02:07][351104340125835][4349 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:02:09][355382706295246][0 ms][INFO] === Request start === [2025-09-08 09:02:09][355382706295246][1 ms][DEBUG] START check_scloud [2025-09-08 09:02:09][355382706295246][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:02:09][355382706295246][272 ms][DEBUG] SU: done in 272 ms; outu0_a118 3154 18092 24474168 203576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:02:09][355382706295246][272 ms][DEBUG] targetPkg: running [2025-09-08 09:02:09][355382706295246][272 ms][DEBUG] END check_scloud in 272 ms [2025-09-08 09:02:09][355382706295246][273 ms][DEBUG] START check_boot_completed [2025-09-08 09:02:09][355382706295246][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:02:09][355382706295246][319 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:02:09][355382706295246][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:02:09][355382706295246][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:02:09][355382706295246][366 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 09:02:09][355382706295246][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:02:09][355382706295246][491 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2021\nsuccessfulTxPacketsPerSecond: 1.0281438099886124\nretriedTxPackets: 536\nretriedTxPacketsPerSecond: 0.247275093541565\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1889\nsuccessfulRxPacketsPerSecond: 0.8361802505287131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:02:09][355382706295246][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:02:10][355382706295246][835 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=236 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 236.294/236.294/236.294/0.000 ms\n [2025-09-08 09:02:10][355382706295246][835 ms][DEBUG] check_internet: online [2025-09-08 09:02:10][355382706295246][835 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:02:10][355382706295246][836 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382706295246\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2956\"}'\'' -e'"" [2025-09-08 09:02:10][355382706295246][836 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:02:10][355382706295246][836 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382706295246\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2956\"}'\'' -e'"" [2025-09-08 09:02:14][355382706295246][5412 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2c1b789-26cd-43cc-88cb-d4c6e2d2cf29","id":"QR_c2c1b789-26cd-43cc-88cb-d4c6e2d2cf29","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:02:14][355382706295246][5568 ms][DEBUG] proc_open done in 4732 ms; code=255; res.len=3343 [2025-09-08 09:02:14][355382706295246][5568 ms][DEBUG] END runCmdUntilRes#1 in 4732 ms [2025-09-08 09:02:14][355382706295246][5568 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:02:17][353196390728482][0 ms][INFO] === Request start === [2025-09-08 09:02:17][353196390728482][1 ms][DEBUG] START check_scloud [2025-09-08 09:02:17][353196390728482][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:02:17][353196390728482][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 3154 18092 24636344 214644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:02:17][353196390728482][270 ms][DEBUG] targetPkg: running [2025-09-08 09:02:17][353196390728482][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-08 09:02:17][353196390728482][270 ms][DEBUG] START check_boot_completed [2025-09-08 09:02:17][353196390728482][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:02:17][353196390728482][317 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 09:02:17][353196390728482][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:02:17][353196390728482][363 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:02:17][353196390728482][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:02:17][353196390728482][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:02:17][353196390728482][475 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2021\nsuccessfulTxPacketsPerSecond: 1.0281438099886124\nretriedTxPackets: 536\nretriedTxPacketsPerSecond: 0.247275093541565\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1889\nsuccessfulRxPacketsPerSecond: 0.8361802505287131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:02:17][353196390728482][475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:02:17][353196390728482][754 ms][DEBUG] SU: done in 279 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.609/163.609/163.609/0.000 ms\n [2025-09-08 09:02:17][353196390728482][754 ms][DEBUG] check_internet: online [2025-09-08 09:02:17][353196390728482][754 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:02:17][353196390728482][754 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196390728482\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1957\"}'\'' -e'"" [2025-09-08 09:02:17][353196390728482][754 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:02:17][353196390728482][754 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196390728482\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1957\"}'\'' -e'"" [2025-09-08 09:02:21][353196390728482][4113 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b8042e3-c020-4db8-8269-122b8f4f9017","id":"QR_8b8042e3-c020-4db8-8269-122b8f4f9017","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:02:21][353196390728482][4269 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-08 09:02:21][353196390728482][4269 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-09-08 09:02:21][353196390728482][4269 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:02:23][351272332429976][0 ms][INFO] === Request start === [2025-09-08 09:02:23][351272332429976][1 ms][DEBUG] START check_scloud [2025-09-08 09:02:23][351272332429976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:02:23][351272332429976][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 3154 18092 24762396 226164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:02:23][351272332429976][267 ms][DEBUG] targetPkg: running [2025-09-08 09:02:23][351272332429976][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-08 09:02:23][351272332429976][267 ms][DEBUG] START check_boot_completed [2025-09-08 09:02:23][351272332429976][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:02:23][351272332429976][313 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:02:23][351272332429976][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:02:23][351272332429976][360 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:02:23][351272332429976][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:02:23][351272332429976][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:02:23][351272332429976][454 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2021\nsuccessfulTxPacketsPerSecond: 1.0281438099886124\nretriedTxPackets: 536\nretriedTxPacketsPerSecond: 0.247275093541565\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1889\nsuccessfulRxPacketsPerSecond: 0.8361802505287131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:02:23][351272332429976][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:02:24][351272332429976][751 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.837/184.837/184.837/0.000 ms\n [2025-09-08 09:02:24][351272332429976][751 ms][DEBUG] check_internet: online [2025-09-08 09:02:24][351272332429976][751 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:02:24][351272332429976][751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272332429976\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9762\"}'\'' -e'"" [2025-09-08 09:02:24][351272332429976][751 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:02:24][351272332429976][751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272332429976\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9762\"}'\'' -e'"" [2025-09-08 09:02:27][351272332429976][4047 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ead67606-c3be-4dc8-9af4-93560aef698d","id":"QR_ead67606-c3be-4dc8-9af4-93560aef698d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:02:27][351272332429976][4203 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-08 09:02:27][351272332429976][4203 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-08 09:02:27][351272332429976][4203 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:03:03][358261911323679][0 ms][INFO] === Request start === [2025-09-08 09:03:03][358261911323679][1 ms][DEBUG] START check_scloud [2025-09-08 09:03:03][358261911323679][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:03:04][358261911323679][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 3154 18092 24859704 238232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:03:04][358261911323679][259 ms][DEBUG] targetPkg: running [2025-09-08 09:03:04][358261911323679][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-08 09:03:04][358261911323679][259 ms][DEBUG] START check_boot_completed [2025-09-08 09:03:04][358261911323679][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:03:04][358261911323679][290 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 09:03:04][358261911323679][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:03:04][358261911323679][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:03:04][358261911323679][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 09:03:04][358261911323679][337 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:03:04][358261911323679][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358261911323679\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3616\"}'\'' -e'"" [2025-09-08 09:03:04][358261911323679][337 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:03:04][358261911323679][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358261911323679\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3616\"}'\'' -e'"" [2025-09-08 09:03:07][358261911323679][4070 ms][DEBUG] proc_open done in 3733 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 09:03:07][358261911323679][4070 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-08 09:03:07][358261911323679][4070 ms][WARN] Detected error: Process with pid 3154 either refused to load frida-agent, or terminated during injectionProcess with pid 3154 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 09:03:07][358261911323679][4071 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 09:03:08][358261911323679][4351 ms][DEBUG] SU: done in 281 ms; outsystem 18326 18092 12767688 194336 ep_poll 0 S system_server\n [2025-09-08 09:03:08][358261911323679][4351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 09:03:08][358261911323679][4492 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 09:03:08][358261911323679][4492 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 09:03:08][358261911323679][4492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 09:03:08][358261911323679][4603 ms][DEBUG] SU: done in 111 ms; out [2025-09-08 09:03:08][358261911323679][4603 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 09:03:08][358261911323679][4758 ms][DEBUG] SU: done in 155 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 09:03:10][358261911323679][6773 ms][DEBUG] START check_boot_completed [2025-09-08 09:03:10][358261911323679][6773 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:03:10][358261911323679][6820 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 09:03:10][358261911323679][6820 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:03:10][358261911323679][6882 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 09:03:10][358261911323679][6882 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 09:03:13][358261911323679][9897 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 09:03:13][358261911323679][9897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358261911323679\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3616\"}'\'' -e'"" [2025-09-08 09:03:18][358261911323679][14974 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1fd97654-e059-445e-8abc-8ca69dfa1d6d","id":"QR_1fd97654-e059-445e-8abc-8ca69dfa1d6d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:03:18][358261911323679][15130 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-08 09:03:18][358261911323679][15130 ms][DEBUG] END runCmdUntilRes#2 in 5233 ms [2025-09-08 09:03:18][358261911323679][15130 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:03:21][358261911323679][1 ms][INFO] === Request start === [2025-09-08 09:03:21][358261911323679][1 ms][DEBUG] START check_scloud [2025-09-08 09:03:21][358261911323679][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:03:21][358261911323679][240 ms][DEBUG] SU: done in 239 ms; outu0_a118 4465 18092 23586076 123940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:03:21][358261911323679][240 ms][DEBUG] targetPkg: running [2025-09-08 09:03:21][358261911323679][240 ms][DEBUG] END check_scloud in 239 ms [2025-09-08 09:03:21][358261911323679][240 ms][DEBUG] START check_boot_completed [2025-09-08 09:03:21][358261911323679][240 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:03:21][358261911323679][286 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:03:21][358261911323679][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:03:21][358261911323679][333 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:03:21][358261911323679][333 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:03:21][358261911323679][333 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:03:21][358261911323679][333 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358261911323679\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7446\"}'\'' -e'"" [2025-09-08 09:03:21][358261911323679][333 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:03:21][358261911323679][333 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358261911323679\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7446\"}'\'' -e'"" [2025-09-08 09:03:25][358261911323679][4863 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e85f2e42-a7b7-4bbc-b0e5-be1806706322","id":"QR_e85f2e42-a7b7-4bbc-b0e5-be1806706322","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:03:26][358261911323679][5020 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-08 09:03:26][358261911323679][5020 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-08 09:03:26][358261911323679][5020 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:03:30][352501918231425][0 ms][INFO] === Request start === [2025-09-08 09:03:30][352501918231425][1 ms][DEBUG] START check_scloud [2025-09-08 09:03:30][352501918231425][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:03:30][352501918231425][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 4465 18092 23787124 137492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:03:30][352501918231425][259 ms][DEBUG] targetPkg: running [2025-09-08 09:03:30][352501918231425][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-08 09:03:30][352501918231425][259 ms][DEBUG] START check_boot_completed [2025-09-08 09:03:30][352501918231425][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:03:30][352501918231425][306 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 09:03:30][352501918231425][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:03:30][352501918231425][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:03:30][352501918231425][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:03:30][352501918231425][353 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:03:30][352501918231425][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501918231425\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6380\"}'\'' -e'"" [2025-09-08 09:03:30][352501918231425][353 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:03:30][352501918231425][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501918231425\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6380\"}'\'' -e'"" [2025-09-08 09:03:34][352501918231425][3742 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f5f0bfb-419a-45df-b708-3109e7e8d881","id":"QR_3f5f0bfb-419a-45df-b708-3109e7e8d881","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:03:34][352501918231425][3898 ms][DEBUG] proc_open done in 3546 ms; code=255; res.len=3343 [2025-09-08 09:03:34][352501918231425][3898 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-08 09:03:34][352501918231425][3898 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:03:36][352501918231425][0 ms][INFO] === Request start === [2025-09-08 09:03:36][352501918231425][1 ms][DEBUG] START check_scloud [2025-09-08 09:03:36][352501918231425][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:03:37][352501918231425][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 4465 18092 23904984 149344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:03:37][352501918231425][312 ms][DEBUG] targetPkg: running [2025-09-08 09:03:37][352501918231425][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 09:03:37][352501918231425][312 ms][DEBUG] START check_boot_completed [2025-09-08 09:03:37][352501918231425][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:03:37][352501918231425][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:03:37][352501918231425][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:03:37][352501918231425][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:03:37][352501918231425][406 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 09:03:37][352501918231425][406 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:03:37][352501918231425][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501918231425\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9755\"}'\'' -e'"" [2025-09-08 09:03:37][352501918231425][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:03:37][352501918231425][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501918231425\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9755\"}'\'' -e'"" [2025-09-08 09:03:41][352501918231425][5045 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa1a2944-0b9e-4f73-9a94-66f783a993da","id":"QR_aa1a2944-0b9e-4f73-9a94-66f783a993da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:03:41][352501918231425][5201 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 09:03:41][352501918231425][5202 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 09:03:41][352501918231425][5202 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:04:03][352288967565537][0 ms][INFO] === Request start === [2025-09-08 09:04:03][352288967565537][1 ms][DEBUG] START check_scloud [2025-09-08 09:04:03][352288967565537][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:04:03][352288967565537][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 4465 18092 23947900 160868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:04:03][352288967565537][259 ms][DEBUG] targetPkg: running [2025-09-08 09:04:03][352288967565537][259 ms][DEBUG] END check_scloud in 259 ms [2025-09-08 09:04:03][352288967565537][259 ms][DEBUG] START check_boot_completed [2025-09-08 09:04:03][352288967565537][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:04:03][352288967565537][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:04:03][352288967565537][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:04:03][352288967565537][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:04:03][352288967565537][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:04:03][352288967565537][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:04:03][352288967565537][478 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2021\nsuccessfulTxPacketsPerSecond: 1.0281438099886124\nretriedTxPackets: 536\nretriedTxPacketsPerSecond: 0.247275093541565\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1889\nsuccessfulRxPacketsPerSecond: 0.8361802505287131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:04:03][352288967565537][478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:04:05][352288967565537][1790 ms][DEBUG] SU: done in 1312 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.195/199.195/199.195/0.000 ms\n [2025-09-08 09:04:05][352288967565537][1790 ms][DEBUG] check_internet: online [2025-09-08 09:04:05][352288967565537][1790 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:04:05][352288967565537][1790 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967565537\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8152\"}'\'' -e'"" [2025-09-08 09:04:05][352288967565537][1790 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:04:05][352288967565537][1790 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967565537\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8152\"}'\'' -e'"" [2025-09-08 09:04:09][352288967565537][5867 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6dabeac5-082f-4ea8-b295-4c3fbd749e77","id":"QR_6dabeac5-082f-4ea8-b295-4c3fbd749e77","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:04:09][352288967565537][6023 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-09-08 09:04:09][352288967565537][6023 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-08 09:04:09][352288967565537][6023 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:04:11][352288967565537][0 ms][INFO] === Request start === [2025-09-08 09:04:11][352288967565537][1 ms][DEBUG] START check_scloud [2025-09-08 09:04:11][352288967565537][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:04:11][352288967565537][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 4465 18092 24110852 171308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:04:11][352288967565537][309 ms][DEBUG] targetPkg: running [2025-09-08 09:04:11][352288967565537][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 09:04:11][352288967565537][309 ms][DEBUG] START check_boot_completed [2025-09-08 09:04:11][352288967565537][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:04:11][352288967565537][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:04:11][352288967565537][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:04:12][352288967565537][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:04:12][352288967565537][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:04:12][352288967565537][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:04:12][352288967565537][512 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2021\nsuccessfulTxPacketsPerSecond: 1.0281438099886124\nretriedTxPackets: 536\nretriedTxPacketsPerSecond: 0.247275093541565\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1889\nsuccessfulRxPacketsPerSecond: 0.8361802505287131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:04:12][352288967565537][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:04:12][352288967565537][902 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=277 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 277.194/277.194/277.194/0.000 ms\n [2025-09-08 09:04:12][352288967565537][902 ms][DEBUG] check_internet: online [2025-09-08 09:04:12][352288967565537][902 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:04:12][352288967565537][903 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967565537\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2746\"}'\'' -e'"" [2025-09-08 09:04:12][352288967565537][903 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:04:12][352288967565537][903 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967565537\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2746\"}'\'' -e'"" [2025-09-08 09:04:17][352288967565537][5589 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98256200-c8d9-4178-aeb5-e881281210dd","id":"QR_98256200-c8d9-4178-aeb5-e881281210dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:04:17][352288967565537][5745 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-08 09:04:17][352288967565537][5745 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-08 09:04:17][352288967565537][5745 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:06:03][350178735523730][1 ms][INFO] === Request start === [2025-09-08 09:06:03][350178735523730][1 ms][DEBUG] START check_scloud [2025-09-08 09:06:03][350178735523730][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:06:04][350178735523730][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 4465 18092 24212372 184012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:06:04][350178735523730][299 ms][DEBUG] targetPkg: running [2025-09-08 09:06:04][350178735523730][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 09:06:04][350178735523730][299 ms][DEBUG] START check_boot_completed [2025-09-08 09:06:04][350178735523730][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:06:04][350178735523730][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 09:06:04][350178735523730][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:06:04][350178735523730][393 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 09:06:04][350178735523730][393 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 09:06:04][350178735523730][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:06:04][350178735523730][520 ms][DEBUG] SU: done in 127 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2021\nsuccessfulTxPacketsPerSecond: 1.0281438099886124\nretriedTxPackets: 536\nretriedTxPacketsPerSecond: 0.247275093541565\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1889\nsuccessfulRxPacketsPerSecond: 0.8361802505287131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:06:04][350178735523730][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:06:04][350178735523730][909 ms][DEBUG] SU: done in 388 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.992/255.992/255.992/0.000 ms\n [2025-09-08 09:06:04][350178735523730][909 ms][DEBUG] check_internet: online [2025-09-08 09:06:04][350178735523730][909 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:06:04][350178735523730][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178735523730\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8331\"}'\'' -e'"" [2025-09-08 09:06:04][350178735523730][909 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:06:04][350178735523730][909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178735523730\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8331\"}'\'' -e'"" [2025-09-08 09:06:09][350178735523730][5751 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ea4c093-41ed-4434-b8f3-aec7b34e566c","id":"QR_7ea4c093-41ed-4434-b8f3-aec7b34e566c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:06:09][350178735523730][5907 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-08 09:06:09][350178735523730][5907 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-08 09:06:09][350178735523730][5907 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:06:12][350178735523730][0 ms][INFO] === Request start === [2025-09-08 09:06:12][350178735523730][1 ms][DEBUG] START check_scloud [2025-09-08 09:06:12][350178735523730][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:06:12][350178735523730][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 4465 18092 24350876 194924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:06:12][350178735523730][314 ms][DEBUG] targetPkg: running [2025-09-08 09:06:12][350178735523730][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 09:06:12][350178735523730][314 ms][DEBUG] START check_boot_completed [2025-09-08 09:06:12][350178735523730][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:06:12][350178735523730][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 09:06:12][350178735523730][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:06:12][350178735523730][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:06:12][350178735523730][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 09:06:12][350178735523730][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:06:12][350178735523730][517 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=151673 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2021\nsuccessfulTxPacketsPerSecond: 1.0281438099886124\nretriedTxPackets: 536\nretriedTxPacketsPerSecond: 0.247275093541565\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1889\nsuccessfulRxPacketsPerSecond: 0.8361802505287131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:06:12][350178735523730][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:06:12][350178735523730][876 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=260 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 260.563/260.563/260.563/0.000 ms\n [2025-09-08 09:06:12][350178735523730][877 ms][DEBUG] check_internet: online [2025-09-08 09:06:12][350178735523730][877 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:06:12][350178735523730][877 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178735523730\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6282\"}'\'' -e'"" [2025-09-08 09:06:12][350178735523730][877 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:06:12][350178735523730][877 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178735523730\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6282\"}'\'' -e'"" [2025-09-08 09:06:18][350178735523730][6031 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8cd187d3-effc-4737-b50d-e82180b7279c","id":"QR_8cd187d3-effc-4737-b50d-e82180b7279c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:06:18][350178735523730][6188 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 09:06:18][350178735523730][6188 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 09:06:18][350178735523730][6188 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:07:03][350013881328891][0 ms][INFO] === Request start === [2025-09-08 09:07:03][350013881328891][1 ms][DEBUG] START check_scloud [2025-09-08 09:07:03][350013881328891][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:07:03][350013881328891][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 4465 18092 24489244 206868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:07:03][350013881328891][282 ms][DEBUG] targetPkg: running [2025-09-08 09:07:03][350013881328891][282 ms][DEBUG] END check_scloud in 281 ms [2025-09-08 09:07:03][350013881328891][282 ms][DEBUG] START check_boot_completed [2025-09-08 09:07:03][350013881328891][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:07:03][350013881328891][328 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:07:03][350013881328891][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:07:04][350013881328891][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:07:04][350013881328891][375 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:07:04][350013881328891][375 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:07:04][350013881328891][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881328891\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8669\"}'\'' -e'"" [2025-09-08 09:07:04][350013881328891][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:07:04][350013881328891][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881328891\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8669\"}'\'' -e'"" [2025-09-08 09:07:07][350013881328891][3827 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f7c3841-e709-4ccd-9aae-463781babe2f","id":"QR_6f7c3841-e709-4ccd-9aae-463781babe2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:07:07][350013881328891][3984 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-08 09:07:07][350013881328891][3984 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-08 09:07:07][350013881328891][3984 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:07:09][350013881328891][0 ms][INFO] === Request start === [2025-09-08 09:07:09][350013881328891][1 ms][DEBUG] START check_scloud [2025-09-08 09:07:09][350013881328891][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:07:10][350013881328891][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 4465 18092 24610460 217560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:07:10][350013881328891][307 ms][DEBUG] targetPkg: running [2025-09-08 09:07:10][350013881328891][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 09:07:10][350013881328891][307 ms][DEBUG] START check_boot_completed [2025-09-08 09:07:10][350013881328891][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:07:10][350013881328891][337 ms][DEBUG] ADB: done in 30 ms; out [2025-09-08 09:07:10][350013881328891][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:07:10][350013881328891][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:07:10][350013881328891][384 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-08 09:07:10][350013881328891][384 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:07:10][350013881328891][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881328891\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6623\"}'\'' -e'"" [2025-09-08 09:07:10][350013881328891][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:07:10][350013881328891][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881328891\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6623\"}'\'' -e'"" [2025-09-08 09:07:15][350013881328891][5211 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_daf94e1f-8262-46e6-aca1-18a05bb27afa","id":"QR_daf94e1f-8262-46e6-aca1-18a05bb27afa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:07:15][350013881328891][5367 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=3343 [2025-09-08 09:07:15][350013881328891][5367 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-09-08 09:07:15][350013881328891][5367 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:07:19][350013886396422][0 ms][INFO] === Request start === [2025-09-08 09:07:19][350013886396422][1 ms][DEBUG] START check_scloud [2025-09-08 09:07:19][350013886396422][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:07:20][350013886396422][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 4465 18092 24783140 229596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:07:20][350013886396422][318 ms][DEBUG] targetPkg: running [2025-09-08 09:07:20][350013886396422][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 09:07:20][350013886396422][318 ms][DEBUG] START check_boot_completed [2025-09-08 09:07:20][350013886396422][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:07:20][350013886396422][363 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 09:07:20][350013886396422][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:07:20][350013886396422][457 ms][DEBUG] SU: done in 93 ms; out [2025-09-08 09:07:20][350013886396422][457 ms][DEBUG] END check_boot_completed in 139 ms [2025-09-08 09:07:20][350013886396422][457 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:07:20][350013886396422][457 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013886396422\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6223\"}'\'' -e'"" [2025-09-08 09:07:20][350013886396422][457 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:07:20][350013886396422][457 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013886396422\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6223\"}'\'' -e'"" [2025-09-08 09:07:24][350013886396422][4987 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_102817b7-6476-4b17-8da8-4985d6419555","id":"QR_102817b7-6476-4b17-8da8-4985d6419555","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:07:24][350013886396422][5143 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-08 09:07:24][350013886396422][5143 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-08 09:07:24][350013886396422][5143 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:07:27][350013886396422][0 ms][INFO] === Request start === [2025-09-08 09:07:27][350013886396422][1 ms][DEBUG] START check_scloud [2025-09-08 09:07:27][350013886396422][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:07:27][350013886396422][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 4465 18092 24945992 240424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:07:27][350013886396422][308 ms][DEBUG] targetPkg: running [2025-09-08 09:07:27][350013886396422][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 09:07:27][350013886396422][308 ms][DEBUG] START check_boot_completed [2025-09-08 09:07:27][350013886396422][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:07:27][350013886396422][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 09:07:27][350013886396422][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:07:27][350013886396422][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 09:07:27][350013886396422][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 09:07:27][350013886396422][417 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:07:27][350013886396422][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013886396422\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3574\"}'\'' -e'"" [2025-09-08 09:07:27][350013886396422][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:07:27][350013886396422][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013886396422\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3574\"}'\'' -e'"" [2025-09-08 09:07:31][350013886396422][4198 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 09:07:31][350013886396422][4198 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-08 09:07:31][350013886396422][4198 ms][WARN] Detected error: Process with pid 4465 either refused to load frida-agent, or terminated during injectionProcess with pid 4465 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 09:07:31][350013886396422][4198 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 09:07:31][350013886396422][4495 ms][DEBUG] SU: done in 297 ms; outsystem 6081 1 12567064 113216 ptrace_stop 0 t system_server\nsystem 18326 18092 12767688 197336 ep_poll 0 S system_server\n [2025-09-08 09:07:31][350013886396422][4495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 09:07:31][350013886396422][4635 ms][DEBUG] SU: done in 139 ms; out [2025-09-08 09:07:31][350013886396422][4635 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 09:07:31][350013886396422][4635 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 09:07:31][350013886396422][4760 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 09:07:31][350013886396422][4760 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 09:07:32][350013886396422][4963 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 09:07:34][350013886396422][6978 ms][DEBUG] START check_boot_completed [2025-09-08 09:07:34][350013886396422][6978 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:07:34][350013886396422][7025 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 09:07:34][350013886396422][7025 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:07:34][350013886396422][7088 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 09:07:34][350013886396422][7088 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 09:07:37][350013886396422][10102 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 09:07:37][350013886396422][10102 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013886396422\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3574\"}'\'' -e'"" [2025-09-08 09:07:37][350013886396422][10634 ms][DEBUG] proc_open done in 531 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-08 09:07:37][350013886396422][10634 ms][DEBUG] END runCmdUntilRes#2 in 532 ms [2025-09-08 09:07:37][350013886396422][10634 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-08 09:07:37][350013886396422][10634 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 09:07:38][350013886396422][10899 ms][DEBUG] SU: done in 265 ms; out [2025-09-08 09:09:04][351081870038192][1 ms][INFO] === Request start === [2025-09-08 09:09:04][351081870038192][1 ms][DEBUG] START check_scloud [2025-09-08 09:09:04][351081870038192][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:09:04][351081870038192][363 ms][DEBUG] SU: done in 362 ms; out [2025-09-08 09:09:04][351081870038192][363 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 09:09:04][351081870038192][410 ms][DEBUG] ADB: done in 46 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 09:09:04][351081870038192][410 ms][DEBUG] check_devices: device found [2025-09-08 09:09:04][351081870038192][410 ms][WARN] targetPkg: not running, restarting [2025-09-08 09:09:04][351081870038192][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 09:09:04][351081870038192][550 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 09:09:04][351081870038192][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 09:09:04][351081870038192][769 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 09:09:06][351081870038192][2784 ms][DEBUG] END check_scloud in 2783 ms [2025-09-08 09:09:06][351081870038192][2784 ms][DEBUG] START check_boot_completed [2025-09-08 09:09:06][351081870038192][2784 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:09:06][351081870038192][2831 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 09:09:06][351081870038192][2831 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:09:06][351081870038192][2878 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:09:06][351081870038192][2878 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 09:09:06][351081870038192][2878 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:09:06][351081870038192][2878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351081870038192\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2515\"}'\'' -e'"" [2025-09-08 09:09:06][351081870038192][2878 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:09:06][351081870038192][2878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351081870038192\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2515\"}'\'' -e'"" [2025-09-08 09:09:12][351081870038192][8236 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c26be69-98af-4727-b078-14b15325e4f1","id":"QR_9c26be69-98af-4727-b078-14b15325e4f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:09:12][351081870038192][8392 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-08 09:09:12][351081870038192][8392 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-08 09:09:12][351081870038192][8392 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:09:14][351081870038192][0 ms][INFO] === Request start === [2025-09-08 09:09:14][351081870038192][1 ms][DEBUG] START check_scloud [2025-09-08 09:09:14][351081870038192][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:09:15][351081870038192][354 ms][DEBUG] SU: done in 353 ms; outu0_a118 14758 6252 23701540 126412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:09:15][351081870038192][354 ms][DEBUG] targetPkg: running [2025-09-08 09:09:15][351081870038192][354 ms][DEBUG] END check_scloud in 353 ms [2025-09-08 09:09:15][351081870038192][354 ms][DEBUG] START check_boot_completed [2025-09-08 09:09:15][351081870038192][354 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:09:15][351081870038192][401 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:09:15][351081870038192][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:09:15][351081870038192][447 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:09:15][351081870038192][447 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:09:15][351081870038192][447 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:09:15][351081870038192][447 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351081870038192\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5960\"}'\'' -e'"" [2025-09-08 09:09:15][351081870038192][447 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:09:15][351081870038192][448 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351081870038192\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5960\"}'\'' -e'"" [2025-09-08 09:09:20][351081870038192][6071 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_155b912d-2687-44fd-913a-921f200b68b4","id":"QR_155b912d-2687-44fd-913a-921f200b68b4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:09:21][351081870038192][6227 ms][DEBUG] proc_open done in 5780 ms; code=255; res.len=3343 [2025-09-08 09:09:21][351081870038192][6227 ms][DEBUG] END runCmdUntilRes#1 in 5780 ms [2025-09-08 09:09:21][351081870038192][6227 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:09:25][352501916410047][0 ms][INFO] === Request start === [2025-09-08 09:09:25][352501916410047][1 ms][DEBUG] START check_scloud [2025-09-08 09:09:25][352501916410047][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:09:25][352501916410047][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 14758 6252 23886072 122628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:09:25][352501916410047][327 ms][DEBUG] targetPkg: running [2025-09-08 09:09:25][352501916410047][327 ms][DEBUG] END check_scloud in 326 ms [2025-09-08 09:09:25][352501916410047][327 ms][DEBUG] START check_boot_completed [2025-09-08 09:09:25][352501916410047][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:09:25][352501916410047][374 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 09:09:25][352501916410047][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:09:25][352501916410047][452 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 09:09:25][352501916410047][452 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 09:09:25][352501916410047][452 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:09:25][352501916410047][452 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501916410047\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2897\"}'\'' -e'"" [2025-09-08 09:09:25][352501916410047][452 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:09:25][352501916410047][452 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501916410047\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2897\"}'\'' -e'"" [2025-09-08 09:09:26][352501916410047][1061 ms][DEBUG] proc_open done in 609 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-08 09:09:26][352501916410047][1061 ms][DEBUG] END runCmdUntilRes#1 in 609 ms [2025-09-08 09:09:26][352501916410047][1061 ms][WARN] Detected system_server; Reboot the device Unable to find process with name 'system_server'Unable to find process with name 'system_server'\r\n [2025-09-08 09:09:26][352501916410047][1061 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 09:09:26][352501916410047][1389 ms][DEBUG] SU: done in 328 ms; out [2025-09-08 09:09:26][352501916410047][1389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-08 09:09:27][352501916410047][2295 ms][DEBUG] SU: done in 906 ms; out [2025-09-08 09:10:03][352501916410047][0 ms][INFO] === Request start === [2025-09-08 09:10:03][352501916410047][1 ms][DEBUG] START check_scloud [2025-09-08 09:10:03][352501916410047][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:10:03][352501916410047][49 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 09:10:03][352501916410047][49 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 09:10:03][352501916410047][80 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-08 09:10:03][352501916410047][80 ms][WARN] check_devices: no device [2025-09-08 09:10:03][352501916410047][80 ms][WARN] check_devices: no device [2025-09-08 09:10:03][352501916410047][80 ms][DEBUG] END check_scloud in 79 ms [2025-09-08 09:11:03][352501916410047][0 ms][INFO] === Request start === [2025-09-08 09:11:03][352501916410047][1 ms][DEBUG] START check_scloud [2025-09-08 09:11:03][352501916410047][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:11:03][352501916410047][412 ms][DEBUG] SU: done in 411 ms; out [2025-09-08 09:11:03][352501916410047][412 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 09:11:03][352501916410047][443 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 09:11:03][352501916410047][443 ms][DEBUG] check_devices: device found [2025-09-08 09:11:03][352501916410047][443 ms][WARN] targetPkg: not running, restarting [2025-09-08 09:11:03][352501916410047][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 09:11:03][352501916410047][584 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 09:11:03][352501916410047][584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 09:11:04][352501916410047][912 ms][DEBUG] SU: done in 328 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 09:11:06][352501916410047][2927 ms][DEBUG] END check_scloud in 2926 ms [2025-09-08 09:11:06][352501916410047][2927 ms][DEBUG] START check_boot_completed [2025-09-08 09:11:06][352501916410047][2927 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:11:06][352501916410047][2974 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 09:11:06][352501916410047][2974 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:11:06][352501916410047][3036 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 09:11:06][352501916410047][3036 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 09:11:06][352501916410047][3036 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:11:06][352501916410047][3037 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501916410047\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4687\"}'\'' -e'"" [2025-09-08 09:11:06][352501916410047][3037 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:11:06][352501916410047][3037 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501916410047\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4687\"}'\'' -e'"" [2025-09-08 09:11:13][352501916410047][10222 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24914ddf-d10b-497c-be9e-9d83c797bad8","id":"QR_24914ddf-d10b-497c-be9e-9d83c797bad8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:11:13][352501916410047][10378 ms][DEBUG] proc_open done in 7341 ms; code=255; res.len=3343 [2025-09-08 09:11:13][352501916410047][10378 ms][DEBUG] END runCmdUntilRes#1 in 7342 ms [2025-09-08 09:11:13][352501916410047][10378 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:11:15][352501916410047][1 ms][INFO] === Request start === [2025-09-08 09:11:15][352501916410047][1 ms][DEBUG] START check_scloud [2025-09-08 09:11:15][352501916410047][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:11:16][352501916410047][348 ms][DEBUG] SU: done in 347 ms; outu0_a118 10928 5021 23628736 113464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:11:16][352501916410047][348 ms][DEBUG] targetPkg: running [2025-09-08 09:11:16][352501916410047][348 ms][DEBUG] END check_scloud in 347 ms [2025-09-08 09:11:16][352501916410047][348 ms][DEBUG] START check_boot_completed [2025-09-08 09:11:16][352501916410047][348 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:11:16][352501916410047][395 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:11:16][352501916410047][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:11:16][352501916410047][457 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 09:11:16][352501916410047][457 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 09:11:16][352501916410047][457 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:11:16][352501916410047][457 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501916410047\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2950\"}'\'' -e'"" [2025-09-08 09:11:16][352501916410047][458 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:11:16][352501916410047][458 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501916410047\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2950\"}'\'' -e'"" [2025-09-08 09:11:22][352501916410047][6909 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a6f8605-70ce-4921-8955-2980fbedde2b","id":"QR_5a6f8605-70ce-4921-8955-2980fbedde2b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:11:23][352501916410047][7065 ms][DEBUG] proc_open done in 6607 ms; code=255; res.len=3343 [2025-09-08 09:11:23][352501916410047][7065 ms][DEBUG] END runCmdUntilRes#1 in 6607 ms [2025-09-08 09:11:23][352501916410047][7065 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:13:03][350804335435914][0 ms][INFO] === Request start === [2025-09-08 09:13:03][350804335435914][1 ms][DEBUG] START check_scloud [2025-09-08 09:13:03][350804335435914][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:13:03][350804335435914][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 10928 5021 23685916 72772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:13:03][350804335435914][310 ms][DEBUG] targetPkg: running [2025-09-08 09:13:03][350804335435914][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 09:13:03][350804335435914][311 ms][DEBUG] START check_boot_completed [2025-09-08 09:13:03][350804335435914][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:13:04][350804335435914][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:13:04][350804335435914][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:13:04][350804335435914][419 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 09:13:04][350804335435914][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 09:13:04][350804335435914][419 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:13:04][350804335435914][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804335435914\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5265\"}'\'' -e'"" [2025-09-08 09:13:04][350804335435914][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:13:04][350804335435914][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804335435914\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5265\"}'\'' -e'"" [2025-09-08 09:13:08][350804335435914][4512 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cbb10816-c9f7-40ab-9adf-ba8b23e9bf78","id":"QR_cbb10816-c9f7-40ab-9adf-ba8b23e9bf78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:13:08][350804335435914][4668 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-09-08 09:13:08][350804335435914][4668 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-08 09:13:08][350804335435914][4669 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:14:03][357147893539740][1 ms][INFO] === Request start === [2025-09-08 09:14:03][357147893539740][1 ms][DEBUG] START check_scloud [2025-09-08 09:14:03][357147893539740][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:14:03][357147893539740][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 10928 5021 23815092 86920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:14:03][357147893539740][304 ms][DEBUG] targetPkg: running [2025-09-08 09:14:03][357147893539740][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 09:14:03][357147893539740][304 ms][DEBUG] START check_boot_completed [2025-09-08 09:14:03][357147893539740][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:14:03][357147893539740][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 09:14:03][357147893539740][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:14:03][357147893539740][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 09:14:03][357147893539740][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 09:14:03][357147893539740][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:14:03][357147893539740][554 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 979\nsuccessfulTxPacketsPerSecond: 10.851208774758572\nretriedTxPackets: 98\nretriedTxPacketsPerSecond: 1.8521665321918777\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1035\nsuccessfulRxPacketsPerSecond: 10.635243531978176\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:14:03][357147893539740][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:14:05][357147893539740][2100 ms][DEBUG] SU: done in 1546 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.505/199.505/199.505/0.000 ms\n [2025-09-08 09:14:05][357147893539740][2101 ms][DEBUG] check_internet: online [2025-09-08 09:14:05][357147893539740][2101 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:14:05][357147893539740][2101 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357147893539740\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1360\"}'\'' -e'"" [2025-09-08 09:14:05][357147893539740][2101 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:14:05][357147893539740][2101 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357147893539740\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1360\"}'\'' -e'"" [2025-09-08 09:14:09][357147893539740][5990 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31160f22-54a8-4ed9-a56f-6f82137d37cf","id":"QR_31160f22-54a8-4ed9-a56f-6f82137d37cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:14:09][357147893539740][6146 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-09-08 09:14:09][357147893539740][6146 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-09-08 09:14:09][357147893539740][6146 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:14:11][357147893539740][0 ms][INFO] === Request start === [2025-09-08 09:14:11][357147893539740][1 ms][DEBUG] START check_scloud [2025-09-08 09:14:11][357147893539740][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:14:12][357147893539740][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 10928 5021 23937084 102984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:14:12][357147893539740][274 ms][DEBUG] targetPkg: running [2025-09-08 09:14:12][357147893539740][274 ms][DEBUG] END check_scloud in 274 ms [2025-09-08 09:14:12][357147893539740][274 ms][DEBUG] START check_boot_completed [2025-09-08 09:14:12][357147893539740][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:14:12][357147893539740][321 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:14:12][357147893539740][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:14:12][357147893539740][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:14:12][357147893539740][368 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:14:12][357147893539740][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:14:12][357147893539740][477 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 979\nsuccessfulTxPacketsPerSecond: 10.851208774758572\nretriedTxPackets: 98\nretriedTxPacketsPerSecond: 1.8521665321918777\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1035\nsuccessfulRxPacketsPerSecond: 10.635243531978176\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:14:12][357147893539740][477 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:14:12][357147893539740][727 ms][DEBUG] SU: done in 250 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=162 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 162.851/162.851/162.851/0.000 ms\n [2025-09-08 09:14:12][357147893539740][727 ms][DEBUG] check_internet: online [2025-09-08 09:14:12][357147893539740][727 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:14:12][357147893539740][727 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357147893539740\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9166\"}'\'' -e'"" [2025-09-08 09:14:12][357147893539740][727 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:14:12][357147893539740][727 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357147893539740\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9166\"}'\'' -e'"" [2025-09-08 09:14:17][357147893539740][5882 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d693a5f4-5e4a-43ac-8123-d3ee5ce59333","id":"QR_d693a5f4-5e4a-43ac-8123-d3ee5ce59333","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:14:17][357147893539740][6038 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 09:14:17][357147893539740][6038 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 09:14:17][357147893539740][6038 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:20:03][353684148069747][1 ms][INFO] === Request start === [2025-09-08 09:20:03][353684148069747][1 ms][DEBUG] START check_scloud [2025-09-08 09:20:03][353684148069747][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:20:03][353684148069747][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 10928 5021 24079420 112928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:20:03][353684148069747][333 ms][DEBUG] targetPkg: running [2025-09-08 09:20:03][353684148069747][333 ms][DEBUG] END check_scloud in 332 ms [2025-09-08 09:20:03][353684148069747][333 ms][DEBUG] START check_boot_completed [2025-09-08 09:20:03][353684148069747][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:20:04][353684148069747][364 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 09:20:04][353684148069747][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:20:04][353684148069747][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:20:04][353684148069747][411 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 09:20:04][353684148069747][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:20:04][353684148069747][536 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1409\nsuccessfulTxPacketsPerSecond: 1.7706476040667245\nretriedTxPackets: 177\nretriedTxPacketsPerSecond: 0.3253050249331889\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1426\nsuccessfulRxPacketsPerSecond: 1.6100539841629984\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:20:04][353684148069747][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:20:05][353684148069747][2130 ms][DEBUG] SU: done in 1593 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.167/291.167/291.167/0.000 ms\n [2025-09-08 09:20:05][353684148069747][2130 ms][DEBUG] check_internet: online [2025-09-08 09:20:05][353684148069747][2130 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:20:05][353684148069747][2130 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684148069747\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6516\"}'\'' -e'"" [2025-09-08 09:20:05][353684148069747][2130 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:20:05][353684148069747][2130 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684148069747\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6516\"}'\'' -e'"" [2025-09-08 09:20:09][353684148069747][5941 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4bb44e08-c300-4ae9-8602-b7b0f3d7f70f","id":"QR_4bb44e08-c300-4ae9-8602-b7b0f3d7f70f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:20:09][353684148069747][6097 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-09-08 09:20:09][353684148069747][6097 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-09-08 09:20:09][353684148069747][6097 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:20:12][353684148069747][0 ms][INFO] === Request start === [2025-09-08 09:20:12][353684148069747][1 ms][DEBUG] START check_scloud [2025-09-08 09:20:12][353684148069747][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:20:12][353684148069747][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 10928 5021 24236356 123540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:20:12][353684148069747][304 ms][DEBUG] targetPkg: running [2025-09-08 09:20:12][353684148069747][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 09:20:12][353684148069747][304 ms][DEBUG] START check_boot_completed [2025-09-08 09:20:12][353684148069747][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:20:12][353684148069747][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 09:20:12][353684148069747][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:20:12][353684148069747][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:20:12][353684148069747][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 09:20:12][353684148069747][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:20:12][353684148069747][507 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1409\nsuccessfulTxPacketsPerSecond: 1.7706476040667245\nretriedTxPackets: 177\nretriedTxPacketsPerSecond: 0.3253050249331889\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1426\nsuccessfulRxPacketsPerSecond: 1.6100539841629984\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:20:12][353684148069747][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:20:12][353684148069747][882 ms][DEBUG] SU: done in 374 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.783/255.783/255.783/0.000 ms\n [2025-09-08 09:20:12][353684148069747][882 ms][DEBUG] check_internet: online [2025-09-08 09:20:12][353684148069747][882 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:20:12][353684148069747][882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684148069747\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3126\"}'\'' -e'"" [2025-09-08 09:20:12][353684148069747][883 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:20:12][353684148069747][883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684148069747\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3126\"}'\'' -e'"" [2025-09-08 09:20:18][353684148069747][6131 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7b0d531-4826-4460-8fc8-d4b3c7e48d49","id":"QR_c7b0d531-4826-4460-8fc8-d4b3c7e48d49","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:20:18][353684148069747][6287 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-08 09:20:18][353684148069747][6287 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-08 09:20:18][353684148069747][6287 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:27:03][357301902785360][1 ms][INFO] === Request start === [2025-09-08 09:27:03][357301902785360][1 ms][DEBUG] START check_scloud [2025-09-08 09:27:03][357301902785360][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:27:04][357301902785360][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 10928 5021 24320440 134800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:27:04][357301902785360][333 ms][DEBUG] targetPkg: running [2025-09-08 09:27:04][357301902785360][333 ms][DEBUG] END check_scloud in 332 ms [2025-09-08 09:27:04][357301902785360][333 ms][DEBUG] START check_boot_completed [2025-09-08 09:27:04][357301902785360][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:27:04][357301902785360][364 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 09:27:04][357301902785360][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:27:04][357301902785360][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:27:04][357301902785360][411 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 09:27:04][357301902785360][411 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:27:04][357301902785360][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357301902785360\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7434\"}'\'' -e'"" [2025-09-08 09:27:04][357301902785360][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:27:04][357301902785360][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357301902785360\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7434\"}'\'' -e'"" [2025-09-08 09:27:09][357301902785360][5566 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34698ce3-cf15-4e7a-84c7-70f4ac207707","id":"QR_34698ce3-cf15-4e7a-84c7-70f4ac207707","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:27:09][357301902785360][5722 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 09:27:09][357301902785360][5722 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 09:27:09][357301902785360][5722 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:27:11][357301902785360][0 ms][INFO] === Request start === [2025-09-08 09:27:11][357301902785360][1 ms][DEBUG] START check_scloud [2025-09-08 09:27:11][357301902785360][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:27:12][357301902785360][339 ms][DEBUG] SU: done in 338 ms; outu0_a118 10928 5021 24480524 146604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:27:12][357301902785360][339 ms][DEBUG] targetPkg: running [2025-09-08 09:27:12][357301902785360][339 ms][DEBUG] END check_scloud in 338 ms [2025-09-08 09:27:12][357301902785360][339 ms][DEBUG] START check_boot_completed [2025-09-08 09:27:12][357301902785360][339 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:27:12][357301902785360][386 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:27:12][357301902785360][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:27:12][357301902785360][432 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:27:12][357301902785360][432 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:27:12][357301902785360][432 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:27:12][357301902785360][432 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357301902785360\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1927\"}'\'' -e'"" [2025-09-08 09:27:12][357301902785360][432 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:27:12][357301902785360][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357301902785360\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1927\"}'\'' -e'"" [2025-09-08 09:27:17][357301902785360][5462 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ad8b9a3-54b6-4429-b52e-55cf000517b1","id":"QR_8ad8b9a3-54b6-4429-b52e-55cf000517b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:27:17][357301902785360][5619 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-08 09:27:17][357301902785360][5619 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-08 09:27:17][357301902785360][5619 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:29:06][350824192823671][1 ms][INFO] === Request start === [2025-09-08 09:29:06][350824192823671][1 ms][DEBUG] START check_scloud [2025-09-08 09:29:06][350824192823671][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:29:07][350824192823671][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 10928 5021 24580044 135624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:29:07][350824192823671][320 ms][DEBUG] targetPkg: running [2025-09-08 09:29:07][350824192823671][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 09:29:07][350824192823671][321 ms][DEBUG] START check_boot_completed [2025-09-08 09:29:07][350824192823671][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:29:07][350824192823671][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 09:29:07][350824192823671][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:29:07][350824192823671][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:29:07][350824192823671][399 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 09:29:07][350824192823671][399 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:29:07][350824192823671][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192823671\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3186\"}'\'' -e'"" [2025-09-08 09:29:07][350824192823671][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:29:07][350824192823671][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192823671\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3186\"}'\'' -e'"" [2025-09-08 09:29:13][350824192823671][6444 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b995b854-bf84-410b-aed4-defd5328f2df","id":"QR_b995b854-bf84-410b-aed4-defd5328f2df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:29:13][350824192823671][6600 ms][DEBUG] proc_open done in 6201 ms; code=255; res.len=3343 [2025-09-08 09:29:13][350824192823671][6600 ms][DEBUG] END runCmdUntilRes#1 in 6201 ms [2025-09-08 09:29:13][350824192823671][6600 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:30:03][358453423908507][1 ms][INFO] === Request start === [2025-09-08 09:30:03][358453423908507][1 ms][DEBUG] START check_scloud [2025-09-08 09:30:03][358453423908507][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:30:03][358453423908507][294 ms][DEBUG] SU: done in 292 ms; outu0_a118 10928 5021 24745136 141796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:30:03][358453423908507][294 ms][DEBUG] targetPkg: running [2025-09-08 09:30:03][358453423908507][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-08 09:30:03][358453423908507][294 ms][DEBUG] START check_boot_completed [2025-09-08 09:30:03][358453423908507][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:30:03][358453423908507][340 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:30:03][358453423908507][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:30:03][358453423908507][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:30:03][358453423908507][387 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:30:03][358453423908507][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:30:03][358453423908507][512 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1754\nsuccessfulTxPacketsPerSecond: 0.5648520793617157\nretriedTxPackets: 268\nretriedTxPacketsPerSecond: 0.10086644274316361\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1721\nsuccessfulRxPacketsPerSecond: 0.5043322137158178\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:30:03][358453423908507][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:30:05][358453423908507][1777 ms][DEBUG] SU: done in 1265 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.617/201.617/201.617/0.000 ms\n [2025-09-08 09:30:05][358453423908507][1777 ms][DEBUG] check_internet: online [2025-09-08 09:30:05][358453423908507][1777 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:30:05][358453423908507][1778 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453423908507\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6364\"}'\'' -e'"" [2025-09-08 09:30:05][358453423908507][1778 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:30:05][358453423908507][1778 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453423908507\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6364\"}'\'' -e'"" [2025-09-08 09:30:09][358453423908507][5605 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0350e149-2a51-4e87-aa95-a1a1c69bb791","id":"QR_0350e149-2a51-4e87-aa95-a1a1c69bb791","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:30:09][358453423908507][5761 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-09-08 09:30:09][358453423908507][5761 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-08 09:30:09][358453423908507][5761 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:30:11][358453423908507][0 ms][INFO] === Request start === [2025-09-08 09:30:11][358453423908507][1 ms][DEBUG] START check_scloud [2025-09-08 09:30:11][358453423908507][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:30:11][358453423908507][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 10928 5021 24872252 155568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:30:11][358453423908507][287 ms][DEBUG] targetPkg: running [2025-09-08 09:30:11][358453423908507][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-08 09:30:11][358453423908507][287 ms][DEBUG] START check_boot_completed [2025-09-08 09:30:11][358453423908507][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:30:12][358453423908507][334 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:30:12][358453423908507][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:30:12][358453423908507][396 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 09:30:12][358453423908507][396 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 09:30:12][358453423908507][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:30:12][358453423908507][521 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1754\nsuccessfulTxPacketsPerSecond: 0.5648520793617157\nretriedTxPackets: 268\nretriedTxPacketsPerSecond: 0.10086644274316361\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1721\nsuccessfulRxPacketsPerSecond: 0.5043322137158178\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:30:12][358453423908507][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:30:12][358453423908507][818 ms][DEBUG] SU: done in 296 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.259/189.259/189.259/0.000 ms\n [2025-09-08 09:30:12][358453423908507][818 ms][DEBUG] check_internet: online [2025-09-08 09:30:12][358453423908507][818 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:30:12][358453423908507][818 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453423908507\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2195\"}'\'' -e'"" [2025-09-08 09:30:12][358453423908507][818 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:30:12][358453423908507][818 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453423908507\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2195\"}'\'' -e'"" [2025-09-08 09:30:16][358453423908507][5083 ms][DEBUG] proc_open done in 4265 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 09:30:16][358453423908507][5083 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-09-08 09:30:16][358453423908507][5083 ms][WARN] Detected error: Process with pid 10928 either refused to load frida-agent, or terminated during injectionProcess with pid 10928 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 09:30:16][358453423908507][5083 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 09:30:17][358453423908507][5380 ms][DEBUG] SU: done in 296 ms; outsystem 5440 5021 12513892 253052 ep_poll 0 S system_server\n [2025-09-08 09:30:17][358453423908507][5380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 09:30:17][358453423908507][5520 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 09:30:17][358453423908507][5520 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 09:30:17][358453423908507][5520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 09:30:17][358453423908507][5645 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 09:30:17][358453423908507][5645 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 09:30:17][358453423908507][5817 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 09:30:19][358453423908507][7832 ms][DEBUG] START check_boot_completed [2025-09-08 09:30:19][358453423908507][7832 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:30:19][358453423908507][7879 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 09:30:19][358453423908507][7879 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:30:19][358453423908507][7941 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 09:30:19][358453423908507][7942 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 09:30:22][358453423908507][10956 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 09:30:22][358453423908507][10956 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453423908507\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2195\"}'\'' -e'"" [2025-09-08 09:30:27][358453423908507][15893 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9cee723-ad52-4330-af20-f5a8a3b736b1","id":"QR_b9cee723-ad52-4330-af20-f5a8a3b736b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:30:27][358453423908507][16049 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-08 09:30:27][358453423908507][16049 ms][DEBUG] END runCmdUntilRes#2 in 5093 ms [2025-09-08 09:30:27][358453423908507][16049 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:33:04][350341127421992][1 ms][INFO] === Request start === [2025-09-08 09:33:04][350341127421992][1 ms][DEBUG] START check_scloud [2025-09-08 09:33:04][350341127421992][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:33:05][350341127421992][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 18931 5021 23473988 128000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:33:05][350341127421992][306 ms][DEBUG] targetPkg: running [2025-09-08 09:33:05][350341127421992][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 09:33:05][350341127421992][306 ms][DEBUG] START check_boot_completed [2025-09-08 09:33:05][350341127421992][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:33:05][350341127421992][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 09:33:05][350341127421992][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:33:05][350341127421992][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:33:05][350341127421992][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 09:33:05][350341127421992][384 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:33:05][350341127421992][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341127421992\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7294\"}'\'' -e'"" [2025-09-08 09:33:05][350341127421992][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:33:05][350341127421992][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341127421992\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7294\"}'\'' -e'"" [2025-09-08 09:33:10][350341127421992][6148 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22c48697-58fb-4e00-bc02-82daf8fcb60c","id":"QR_22c48697-58fb-4e00-bc02-82daf8fcb60c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:33:11][350341127421992][6304 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-09-08 09:33:11][350341127421992][6304 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-09-08 09:33:11][350341127421992][6304 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:33:14][350341127421992][0 ms][INFO] === Request start === [2025-09-08 09:33:14][350341127421992][1 ms][DEBUG] START check_scloud [2025-09-08 09:33:14][350341127421992][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:33:14][350341127421992][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 18931 5021 23643176 138524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:33:14][350341127421992][318 ms][DEBUG] targetPkg: running [2025-09-08 09:33:14][350341127421992][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 09:33:14][350341127421992][318 ms][DEBUG] START check_boot_completed [2025-09-08 09:33:14][350341127421992][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:33:14][350341127421992][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:33:14][350341127421992][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:33:15][350341127421992][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:33:15][350341127421992][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 09:33:15][350341127421992][411 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:33:15][350341127421992][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341127421992\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1652\"}'\'' -e'"" [2025-09-08 09:33:15][350341127421992][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:33:15][350341127421992][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341127421992\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1652\"}'\'' -e'"" [2025-09-08 09:33:18][350341127421992][4379 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c5534bd-d67c-440a-8aa2-53b979e98a44","id":"QR_5c5534bd-d67c-440a-8aa2-53b979e98a44","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:33:19][350341127421992][4535 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-09-08 09:33:19][350341127421992][4535 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-09-08 09:33:19][350341127421992][4535 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:34:03][353722583372935][0 ms][INFO] === Request start === [2025-09-08 09:34:03][353722583372935][1 ms][DEBUG] START check_scloud [2025-09-08 09:34:03][353722583372935][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:34:03][353722583372935][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 18931 5021 23774376 150072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:34:03][353722583372935][318 ms][DEBUG] targetPkg: running [2025-09-08 09:34:03][353722583372935][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 09:34:03][353722583372935][318 ms][DEBUG] START check_boot_completed [2025-09-08 09:34:03][353722583372935][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:34:03][353722583372935][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:34:03][353722583372935][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:34:03][353722583372935][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:34:03][353722583372935][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:34:03][353722583372935][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:34:03][353722583372935][522 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1911\nsuccessfulTxPacketsPerSecond: 0.5190185590457993\nretriedTxPackets: 315\nretriedTxPacketsPerSecond: 0.15537498264428384\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1863\nsuccessfulRxPacketsPerSecond: 0.4694307986274108\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:34:03][353722583372935][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:34:04][353722583372935][912 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=246 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 246.304/246.304/246.304/0.000 ms\n [2025-09-08 09:34:04][353722583372935][913 ms][DEBUG] check_internet: online [2025-09-08 09:34:04][353722583372935][913 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:34:04][353722583372935][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722583372935\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5844\"}'\'' -e'"" [2025-09-08 09:34:04][353722583372935][913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:34:04][353722583372935][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722583372935\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5844\"}'\'' -e'"" [2025-09-08 09:34:07][353722583372935][4192 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5b8aee4-ad91-45f9-b73f-5c2eb4b79b5c","id":"QR_d5b8aee4-ad91-45f9-b73f-5c2eb4b79b5c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:34:07][353722583372935][4348 ms][DEBUG] proc_open done in 3435 ms; code=255; res.len=3343 [2025-09-08 09:34:07][353722583372935][4348 ms][DEBUG] END runCmdUntilRes#1 in 3435 ms [2025-09-08 09:34:07][353722583372935][4348 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:34:09][353722583372935][0 ms][INFO] === Request start === [2025-09-08 09:34:09][353722583372935][1 ms][DEBUG] START check_scloud [2025-09-08 09:34:09][353722583372935][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:34:10][353722583372935][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 18931 5021 23923056 160996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:34:10][353722583372935][286 ms][DEBUG] targetPkg: running [2025-09-08 09:34:10][353722583372935][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-08 09:34:10][353722583372935][286 ms][DEBUG] START check_boot_completed [2025-09-08 09:34:10][353722583372935][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:34:10][353722583372935][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:34:10][353722583372935][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:34:10][353722583372935][394 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 09:34:10][353722583372935][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 09:34:10][353722583372935][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:34:10][353722583372935][550 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1911\nsuccessfulTxPacketsPerSecond: 0.5190185590457993\nretriedTxPackets: 315\nretriedTxPacketsPerSecond: 0.15537498264428384\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1863\nsuccessfulRxPacketsPerSecond: 0.4694307986274108\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:34:10][353722583372935][550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:34:10][353722583372935][895 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=241 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 241.684/241.684/241.684/0.000 ms\n [2025-09-08 09:34:10][353722583372935][895 ms][DEBUG] check_internet: online [2025-09-08 09:34:10][353722583372935][895 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:34:10][353722583372935][895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722583372935\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8844\"}'\'' -e'"" [2025-09-08 09:34:10][353722583372935][895 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:34:10][353722583372935][895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722583372935\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8844\"}'\'' -e'"" [2025-09-08 09:34:16][353722583372935][6861 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8ef9a37-ca26-44a3-b7da-43c0a27df9f6","id":"QR_c8ef9a37-ca26-44a3-b7da-43c0a27df9f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:34:16][353722583372935][7018 ms][DEBUG] proc_open done in 6123 ms; code=255; res.len=3343 [2025-09-08 09:34:16][353722583372935][7018 ms][DEBUG] END runCmdUntilRes#1 in 6123 ms [2025-09-08 09:34:16][353722583372935][7018 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:36:03][351084830963228][1 ms][INFO] === Request start === [2025-09-08 09:36:03][351084830963228][1 ms][DEBUG] START check_scloud [2025-09-08 09:36:03][351084830963228][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:36:04][351084830963228][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 18931 5021 24039820 172060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:36:04][351084830963228][322 ms][DEBUG] targetPkg: running [2025-09-08 09:36:04][351084830963228][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-08 09:36:04][351084830963228][322 ms][DEBUG] START check_boot_completed [2025-09-08 09:36:04][351084830963228][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:36:04][351084830963228][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:36:04][351084830963228][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:36:04][351084830963228][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:36:04][351084830963228][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:36:04][351084830963228][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:36:04][351084830963228][525 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1911\nsuccessfulTxPacketsPerSecond: 0.5190185590457993\nretriedTxPackets: 315\nretriedTxPacketsPerSecond: 0.15537498264428384\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1863\nsuccessfulRxPacketsPerSecond: 0.4694307986274108\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:36:04][351084830963228][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:36:05][351084830963228][1821 ms][DEBUG] SU: done in 1297 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.941/190.941/190.941/0.000 ms\n [2025-09-08 09:36:05][351084830963228][1821 ms][DEBUG] check_internet: online [2025-09-08 09:36:05][351084830963228][1821 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:36:05][351084830963228][1821 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351084830963228\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9361\"}'\'' -e'"" [2025-09-08 09:36:05][351084830963228][1821 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:36:05][351084830963228][1821 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351084830963228\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9361\"}'\'' -e'"" [2025-09-08 09:36:09][351084830963228][5680 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a8c6235-64ee-4839-ac02-539350ae3cbc","id":"QR_9a8c6235-64ee-4839-ac02-539350ae3cbc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:36:09][351084830963228][5836 ms][DEBUG] proc_open done in 4015 ms; code=255; res.len=3343 [2025-09-08 09:36:09][351084830963228][5836 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-09-08 09:36:09][351084830963228][5836 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:36:12][351084830963228][0 ms][INFO] === Request start === [2025-09-08 09:36:12][351084830963228][1 ms][DEBUG] START check_scloud [2025-09-08 09:36:12][351084830963228][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:36:12][351084830963228][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 18931 5021 24213140 183940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:36:12][351084830963228][269 ms][DEBUG] targetPkg: running [2025-09-08 09:36:12][351084830963228][269 ms][DEBUG] END check_scloud in 269 ms [2025-09-08 09:36:12][351084830963228][269 ms][DEBUG] START check_boot_completed [2025-09-08 09:36:12][351084830963228][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:36:12][351084830963228][316 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:36:12][351084830963228][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:36:12][351084830963228][363 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:36:12][351084830963228][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:36:12][351084830963228][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:36:12][351084830963228][472 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1911\nsuccessfulTxPacketsPerSecond: 0.5190185590457993\nretriedTxPackets: 315\nretriedTxPacketsPerSecond: 0.15537498264428384\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1863\nsuccessfulRxPacketsPerSecond: 0.4694307986274108\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:36:12][351084830963228][472 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:36:13][351084830963228][738 ms][DEBUG] SU: done in 265 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=158 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 158.237/158.237/158.237/0.000 ms\n [2025-09-08 09:36:13][351084830963228][738 ms][DEBUG] check_internet: online [2025-09-08 09:36:13][351084830963228][738 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:36:13][351084830963228][738 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351084830963228\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1364\"}'\'' -e'"" [2025-09-08 09:36:13][351084830963228][738 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:36:13][351084830963228][738 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351084830963228\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1364\"}'\'' -e'"" [2025-09-08 09:36:17][351084830963228][5362 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b543af5-6e49-485a-929b-4cbcee0a512b","id":"QR_0b543af5-6e49-485a-929b-4cbcee0a512b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:36:17][351084830963228][5518 ms][DEBUG] proc_open done in 4779 ms; code=255; res.len=3343 [2025-09-08 09:36:17][351084830963228][5518 ms][DEBUG] END runCmdUntilRes#1 in 4779 ms [2025-09-08 09:36:17][351084830963228][5518 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:38:04][351234166813055][1 ms][INFO] === Request start === [2025-09-08 09:38:04][351234166813055][1 ms][DEBUG] START check_scloud [2025-09-08 09:38:04][351234166813055][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:38:04][351234166813055][341 ms][DEBUG] SU: done in 340 ms; outu0_a118 18931 5021 24350576 186844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:38:04][351234166813055][341 ms][DEBUG] targetPkg: running [2025-09-08 09:38:04][351234166813055][341 ms][DEBUG] END check_scloud in 340 ms [2025-09-08 09:38:04][351234166813055][341 ms][DEBUG] START check_boot_completed [2025-09-08 09:38:04][351234166813055][341 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:38:04][351234166813055][388 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:38:04][351234166813055][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:38:04][351234166813055][435 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:38:04][351234166813055][435 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 09:38:04][351234166813055][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:38:04][351234166813055][560 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2335\nsuccessfulTxPacketsPerSecond: 1.8351244551974273\nretriedTxPackets: 375\nretriedTxPacketsPerSecond: 0.25968742290529634\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2283\nsuccessfulRxPacketsPerSecond: 1.8178119603370744\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:38:04][351234166813055][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:38:05][351234166813055][904 ms][DEBUG] SU: done in 343 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=235 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 235.177/235.177/235.177/0.000 ms\n [2025-09-08 09:38:05][351234166813055][904 ms][DEBUG] check_internet: online [2025-09-08 09:38:05][351234166813055][904 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:38:05][351234166813055][904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234166813055\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2249\"}'\'' -e'"" [2025-09-08 09:38:05][351234166813055][904 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:38:05][351234166813055][904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234166813055\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2249\"}'\'' -e'"" [2025-09-08 09:38:10][351234166813055][5793 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 09:38:10][351234166813055][5949 ms][DEBUG] proc_open done in 5045 ms; code=255; res.len=107 [2025-09-08 09:38:10][351234166813055][5949 ms][DEBUG] END runCmdUntilRes#1 in 5045 ms [2025-09-08 09:38:10][351234166813055][5949 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 09:38:10][][0 ms][INFO] === Request start === [2025-09-08 09:38:10][][0 ms][DEBUG] START check_scloud [2025-09-08 09:38:10][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:38:10][][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 18931 5021 24471792 180976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:38:10][][310 ms][DEBUG] targetPkg: running [2025-09-08 09:38:10][][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 09:38:10][][310 ms][DEBUG] START check_boot_completed [2025-09-08 09:38:10][][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:38:10][][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 09:38:10][][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:38:10][][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:38:10][][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 09:38:10][][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:38:11][][560 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2335\nsuccessfulTxPacketsPerSecond: 1.8351244551974273\nretriedTxPackets: 375\nretriedTxPacketsPerSecond: 0.25968742290529634\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2283\nsuccessfulRxPacketsPerSecond: 1.8178119603370744\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:38:11][][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:38:11][][872 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.415/164.415/164.415/0.000 ms\n [2025-09-08 09:38:11][][872 ms][DEBUG] check_internet: online [2025-09-08 09:38:11][][872 ms][DEBUG] rawBody.length=1131 [2025-09-08 09:38:11][][873 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX4186F0B\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2618\"}'\'' -e'"" [2025-09-08 09:38:11][][873 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:38:11][][873 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX4186F0B\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2618\"}'\'' -e'"" [2025-09-08 09:38:14][][3856 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 09:38:14][][4012 ms][DEBUG] proc_open done in 3139 ms; code=255; res.len=107 [2025-09-08 09:38:14][][4012 ms][DEBUG] END runCmdUntilRes#1 in 3139 ms [2025-09-08 09:38:14][][4012 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 09:38:16][351234166813055][0 ms][INFO] === Request start === [2025-09-08 09:38:16][351234166813055][1 ms][DEBUG] START check_scloud [2025-09-08 09:38:16][351234166813055][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:38:16][351234166813055][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 18931 5021 24649084 196228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:38:16][351234166813055][313 ms][DEBUG] targetPkg: running [2025-09-08 09:38:16][351234166813055][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 09:38:16][351234166813055][313 ms][DEBUG] START check_boot_completed [2025-09-08 09:38:16][351234166813055][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:38:16][351234166813055][342 ms][DEBUG] ADB: done in 29 ms; out [2025-09-08 09:38:16][351234166813055][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:38:16][351234166813055][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:38:16][351234166813055][389 ms][DEBUG] END check_boot_completed in 76 ms [2025-09-08 09:38:16][351234166813055][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:38:16][351234166813055][514 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2335\nsuccessfulTxPacketsPerSecond: 1.8351244551974273\nretriedTxPackets: 375\nretriedTxPacketsPerSecond: 0.25968742290529634\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2283\nsuccessfulRxPacketsPerSecond: 1.8178119603370744\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:38:16][351234166813055][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:38:17][351234166813055][796 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.261/164.261/164.261/0.000 ms\n [2025-09-08 09:38:17][351234166813055][796 ms][DEBUG] check_internet: online [2025-09-08 09:38:17][351234166813055][796 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:38:17][351234166813055][796 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234166813055\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8244\"}'\'' -e'"" [2025-09-08 09:38:17][351234166813055][796 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:38:17][351234166813055][796 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234166813055\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8244\"}'\'' -e'"" [2025-09-08 09:38:22][351234166813055][5966 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d0ccb681-19d6-4b97-9bac-8440d5e71322","id":"QR_d0ccb681-19d6-4b97-9bac-8440d5e71322","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:38:22][351234166813055][6122 ms][DEBUG] proc_open done in 5326 ms; code=255; res.len=3343 [2025-09-08 09:38:22][351234166813055][6123 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-09-08 09:38:22][351234166813055][6123 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:39:03][353475123491539][0 ms][INFO] === Request start === [2025-09-08 09:39:03][353475123491539][1 ms][DEBUG] START check_scloud [2025-09-08 09:39:03][353475123491539][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:39:03][353475123491539][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 18931 5021 24737624 207800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:39:03][353475123491539][316 ms][DEBUG] targetPkg: running [2025-09-08 09:39:03][353475123491539][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 09:39:03][353475123491539][317 ms][DEBUG] START check_boot_completed [2025-09-08 09:39:03][353475123491539][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:39:03][353475123491539][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:39:03][353475123491539][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:39:03][353475123491539][426 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 09:39:03][353475123491539][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 09:39:03][353475123491539][426 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:39:03][353475123491539][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475123491539\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6144\"}'\'' -e'"" [2025-09-08 09:39:03][353475123491539][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:39:03][353475123491539][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475123491539\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6144\"}'\'' -e'"" [2025-09-08 09:39:07][353475123491539][4518 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_90bdd174-3acc-4355-b07b-f0444279fe25","id":"QR_90bdd174-3acc-4355-b07b-f0444279fe25","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:39:07][353475123491539][4675 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-09-08 09:39:07][353475123491539][4675 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-08 09:39:07][353475123491539][4675 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:39:10][353475123491539][0 ms][INFO] === Request start === [2025-09-08 09:39:10][353475123491539][1 ms][DEBUG] START check_scloud [2025-09-08 09:39:10][353475123491539][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:39:10][353475123491539][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 18931 5021 24902624 218644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:39:10][353475123491539][317 ms][DEBUG] targetPkg: running [2025-09-08 09:39:10][353475123491539][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 09:39:10][353475123491539][317 ms][DEBUG] START check_boot_completed [2025-09-08 09:39:10][353475123491539][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:39:10][353475123491539][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 09:39:10][353475123491539][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:39:10][353475123491539][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 09:39:10][353475123491539][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 09:39:10][353475123491539][427 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:39:10][353475123491539][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475123491539\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9337\"}'\'' -e'"" [2025-09-08 09:39:10][353475123491539][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:39:10][353475123491539][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475123491539\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9337\"}'\'' -e'"" [2025-09-08 09:39:14][353475123491539][4395 ms][DEBUG] proc_open done in 3967 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 09:39:14][353475123491539][4395 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-09-08 09:39:14][353475123491539][4395 ms][WARN] Detected error: Process with pid 18931 either refused to load frida-agent, or terminated during injectionProcess with pid 18931 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 09:39:14][353475123491539][4395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 09:39:14][353475123491539][4722 ms][DEBUG] SU: done in 327 ms; outsystem 5440 5021 12644496 219384 ep_poll 0 S system_server\n [2025-09-08 09:39:14][353475123491539][4722 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 09:39:14][353475123491539][4847 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 09:39:14][353475123491539][4847 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 09:39:14][353475123491539][4847 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 09:39:15][353475123491539][4973 ms][DEBUG] SU: done in 126 ms; out [2025-09-08 09:39:15][353475123491539][4973 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 09:39:15][353475123491539][5160 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 09:39:17][353475123491539][7175 ms][DEBUG] START check_boot_completed [2025-09-08 09:39:17][353475123491539][7175 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:39:17][353475123491539][7222 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 09:39:17][353475123491539][7222 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:39:17][353475123491539][7269 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:39:17][353475123491539][7269 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 09:39:20][353475123491539][10283 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 09:39:20][353475123491539][10283 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475123491539\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9337\"}'\'' -e'"" [2025-09-08 09:39:26][353475123491539][16454 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d7ee0ba-b3aa-42d5-9af6-e97b0ac2a17a","id":"QR_8d7ee0ba-b3aa-42d5-9af6-e97b0ac2a17a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:39:26][353475123491539][16610 ms][DEBUG] proc_open done in 6326 ms; code=255; res.len=3343 [2025-09-08 09:39:26][353475123491539][16610 ms][DEBUG] END runCmdUntilRes#2 in 6327 ms [2025-09-08 09:39:26][353475123491539][16610 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:47:03][352397458966706][1 ms][INFO] === Request start === [2025-09-08 09:47:03][352397458966706][1 ms][DEBUG] START check_scloud [2025-09-08 09:47:03][352397458966706][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:47:03][352397458966706][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 21113 5021 23554684 125400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:47:03][352397458966706][275 ms][DEBUG] targetPkg: running [2025-09-08 09:47:03][352397458966706][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-08 09:47:03][352397458966706][275 ms][DEBUG] START check_boot_completed [2025-09-08 09:47:03][352397458966706][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:47:03][352397458966706][321 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 09:47:03][352397458966706][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:47:03][352397458966706][383 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 09:47:03][352397458966706][383 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 09:47:03][352397458966706][383 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:47:03][352397458966706][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397458966706\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4924\"}'\'' -e'"" [2025-09-08 09:47:03][352397458966706][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:47:03][352397458966706][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397458966706\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4924\"}'\'' -e'"" [2025-09-08 09:47:08][352397458966706][4976 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_86ef30a8-3018-44cf-ab61-b30c2742c7b5","id":"QR_86ef30a8-3018-44cf-ab61-b30c2742c7b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:47:08][352397458966706][5132 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3343 [2025-09-08 09:47:08][352397458966706][5132 ms][DEBUG] END runCmdUntilRes#1 in 4749 ms [2025-09-08 09:47:08][352397458966706][5132 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:47:10][352397458966706][0 ms][INFO] === Request start === [2025-09-08 09:47:10][352397458966706][1 ms][DEBUG] START check_scloud [2025-09-08 09:47:10][352397458966706][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:47:10][352397458966706][256 ms][DEBUG] SU: done in 256 ms; outu0_a118 21113 5021 23702288 114184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:47:10][352397458966706][257 ms][DEBUG] targetPkg: running [2025-09-08 09:47:10][352397458966706][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-08 09:47:10][352397458966706][257 ms][DEBUG] START check_boot_completed [2025-09-08 09:47:10][352397458966706][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:47:11][352397458966706][302 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 09:47:11][352397458966706][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:47:11][352397458966706][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:47:11][352397458966706][348 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 09:47:11][352397458966706][348 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:47:11][352397458966706][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397458966706\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9716\"}'\'' -e'"" [2025-09-08 09:47:11][352397458966706][349 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:47:11][352397458966706][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397458966706\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9716\"}'\'' -e'"" [2025-09-08 09:47:16][352397458966706][5394 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d5005e3-3be6-4ea8-9adc-48fdce708977","id":"QR_0d5005e3-3be6-4ea8-9adc-48fdce708977","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:47:16][352397458966706][5550 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-08 09:47:16][352397458966706][5550 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-08 09:47:16][352397458966706][5550 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:51:03][350178739070118][1 ms][INFO] === Request start === [2025-09-08 09:51:03][350178739070118][1 ms][DEBUG] START check_scloud [2025-09-08 09:51:03][350178739070118][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:51:03][350178739070118][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 21113 5021 23797584 125808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:51:03][350178739070118][266 ms][DEBUG] targetPkg: running [2025-09-08 09:51:03][350178739070118][266 ms][DEBUG] END check_scloud in 264 ms [2025-09-08 09:51:03][350178739070118][266 ms][DEBUG] START check_boot_completed [2025-09-08 09:51:03][350178739070118][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:51:03][350178739070118][297 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 09:51:03][350178739070118][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:51:03][350178739070118][343 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 09:51:03][350178739070118][343 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 09:51:03][350178739070118][343 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:51:03][350178739070118][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739070118\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3417\"}'\'' -e'"" [2025-09-08 09:51:03][350178739070118][344 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:51:03][350178739070118][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739070118\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3417\"}'\'' -e'"" [2025-09-08 09:51:08][350178739070118][4733 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7eb65e2-d6f6-40da-9819-7077019a05ae","id":"QR_a7eb65e2-d6f6-40da-9819-7077019a05ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:51:08][350178739070118][4889 ms][DEBUG] proc_open done in 4546 ms; code=255; res.len=3343 [2025-09-08 09:51:08][350178739070118][4889 ms][DEBUG] END runCmdUntilRes#1 in 4546 ms [2025-09-08 09:51:08][350178739070118][4889 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:51:10][350178739070118][0 ms][INFO] === Request start === [2025-09-08 09:51:10][350178739070118][1 ms][DEBUG] START check_scloud [2025-09-08 09:51:10][350178739070118][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:51:11][350178739070118][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 21113 5021 23968728 135272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:51:11][350178739070118][329 ms][DEBUG] targetPkg: running [2025-09-08 09:51:11][350178739070118][329 ms][DEBUG] END check_scloud in 329 ms [2025-09-08 09:51:11][350178739070118][329 ms][DEBUG] START check_boot_completed [2025-09-08 09:51:11][350178739070118][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:51:11][350178739070118][376 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 09:51:11][350178739070118][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:51:11][350178739070118][438 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 09:51:11][350178739070118][439 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 09:51:11][350178739070118][439 ms][DEBUG] rawBody.length=1160 [2025-09-08 09:51:11][350178739070118][439 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739070118\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7166\"}'\'' -e'"" [2025-09-08 09:51:11][350178739070118][439 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:51:11][350178739070118][439 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739070118\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7166\"}'\'' -e'"" [2025-09-08 09:51:16][350178739070118][5640 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aec95a68-b269-4ef5-b547-3ff61a6e3107","id":"QR_aec95a68-b269-4ef5-b547-3ff61a6e3107","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:51:16][350178739070118][5796 ms][DEBUG] proc_open done in 5357 ms; code=255; res.len=3343 [2025-09-08 09:51:16][350178739070118][5796 ms][DEBUG] END runCmdUntilRes#1 in 5357 ms [2025-09-08 09:51:16][350178739070118][5796 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 09:52:04][356006791410159][0 ms][INFO] === Request start === [2025-09-08 09:52:04][356006791410159][1 ms][DEBUG] START check_scloud [2025-09-08 09:52:04][356006791410159][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 09:52:04][356006791410159][324 ms][DEBUG] SU: done in 324 ms; outu0_a118 21113 5021 24057944 138084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 09:52:04][356006791410159][325 ms][DEBUG] targetPkg: running [2025-09-08 09:52:04][356006791410159][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 09:52:04][356006791410159][325 ms][DEBUG] START check_boot_completed [2025-09-08 09:52:04][356006791410159][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 09:52:04][356006791410159][371 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 09:52:04][356006791410159][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 09:52:04][356006791410159][434 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 09:52:04][356006791410159][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 09:52:04][356006791410159][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 09:52:04][356006791410159][574 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3105\nsuccessfulTxPacketsPerSecond: 0.9236985805070224\nretriedTxPackets: 582\nretriedTxPacketsPerSecond: 0.21215691778429843\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2942\nsuccessfulRxPacketsPerSecond: 0.7931404772551465\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 09:52:04][356006791410159][575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 09:52:06][356006791410159][2043 ms][DEBUG] SU: done in 1468 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.361/199.361/199.361/0.000 ms\n [2025-09-08 09:52:06][356006791410159][2043 ms][DEBUG] check_internet: online [2025-09-08 09:52:06][356006791410159][2043 ms][DEBUG] rawBody.length=1150 [2025-09-08 09:52:06][356006791410159][2043 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356006791410159\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6067\"}'\'' -e'"" [2025-09-08 09:52:06][356006791410159][2043 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 09:52:06][356006791410159][2043 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356006791410159\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6067\"}'\'' -e'"" [2025-09-08 09:52:10][356006791410159][6370 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bfe9c9d3-ecf8-480d-ac57-0f9dfde1d739","id":"QR_bfe9c9d3-ecf8-480d-ac57-0f9dfde1d739","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 09:52:10][356006791410159][6526 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-09-08 09:52:10][356006791410159][6526 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-08 09:52:10][356006791410159][6526 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:01:03][357879702330537][1 ms][INFO] === Request start === [2025-09-08 10:01:03][357879702330537][1 ms][DEBUG] START check_scloud [2025-09-08 10:01:03][357879702330537][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:01:04][357879702330537][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 21113 5021 24152304 150316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:01:04][357879702330537][311 ms][DEBUG] targetPkg: running [2025-09-08 10:01:04][357879702330537][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 10:01:04][357879702330537][311 ms][DEBUG] START check_boot_completed [2025-09-08 10:01:04][357879702330537][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:01:04][357879702330537][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:01:04][357879702330537][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:01:04][357879702330537][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:01:04][357879702330537][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 10:01:04][357879702330537][389 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:01:04][357879702330537][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357879702330537\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9367\"}'\'' -e'"" [2025-09-08 10:01:04][357879702330537][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:01:04][357879702330537][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357879702330537\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9367\"}'\'' -e'"" [2025-09-08 10:01:08][357879702330537][4966 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4fc7241-390e-401e-b9f3-ebd0cb4ec832","id":"QR_b4fc7241-390e-401e-b9f3-ebd0cb4ec832","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:01:09][357879702330537][5122 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-08 10:01:09][357879702330537][5122 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-08 10:01:09][357879702330537][5122 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:01:11][357879702330537][0 ms][INFO] === Request start === [2025-09-08 10:01:11][357879702330537][1 ms][DEBUG] START check_scloud [2025-09-08 10:01:11][357879702330537][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:01:11][357879702330537][335 ms][DEBUG] SU: done in 334 ms; outu0_a118 21113 5021 24316420 145076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:01:11][357879702330537][335 ms][DEBUG] targetPkg: running [2025-09-08 10:01:11][357879702330537][335 ms][DEBUG] END check_scloud in 334 ms [2025-09-08 10:01:11][357879702330537][335 ms][DEBUG] START check_boot_completed [2025-09-08 10:01:11][357879702330537][335 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:01:11][357879702330537][381 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:01:11][357879702330537][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:01:11][357879702330537][429 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 10:01:11][357879702330537][429 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 10:01:11][357879702330537][429 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:01:11][357879702330537][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357879702330537\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3233\"}'\'' -e'"" [2025-09-08 10:01:11][357879702330537][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:01:11][357879702330537][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357879702330537\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3233\"}'\'' -e'"" [2025-09-08 10:01:16][357879702330537][5458 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc90daf5-0e33-4244-857a-b33d1b33268b","id":"QR_cc90daf5-0e33-4244-857a-b33d1b33268b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:01:17][357879702330537][5614 ms][DEBUG] proc_open done in 5185 ms; code=255; res.len=3343 [2025-09-08 10:01:17][357879702330537][5614 ms][DEBUG] END runCmdUntilRes#1 in 5185 ms [2025-09-08 10:01:17][357879702330537][5614 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:04:03][350961874913436][1 ms][INFO] === Request start === [2025-09-08 10:04:03][350961874913436][1 ms][DEBUG] START check_scloud [2025-09-08 10:04:03][350961874913436][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:04:04][350961874913436][319 ms][DEBUG] SU: done in 317 ms; outu0_a118 21113 5021 24463044 149084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:04:04][350961874913436][319 ms][DEBUG] targetPkg: running [2025-09-08 10:04:04][350961874913436][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 10:04:04][350961874913436][319 ms][DEBUG] START check_boot_completed [2025-09-08 10:04:04][350961874913436][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:04:04][350961874913436][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:04:04][350961874913436][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:04:04][350961874913436][444 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 10:04:04][350961874913436][444 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 10:04:04][350961874913436][444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:04:04][350961874913436][600 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3254\nsuccessfulTxPacketsPerSecond: 0.15615240474703326\nretriedTxPackets: 632\nretriedTxPacketsPerSecond: 0.03903810118675832\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3071\nsuccessfulRxPacketsPerSecond: 0.16591193004372276\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:04:04][350961874913436][600 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:04:04][350961874913436][1162 ms][DEBUG] SU: done in 562 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.960/200.960/200.960/0.000 ms\n [2025-09-08 10:04:04][350961874913436][1162 ms][DEBUG] check_internet: online [2025-09-08 10:04:04][350961874913436][1162 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:04:04][350961874913436][1163 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350961874913436\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9350\"}'\'' -e'"" [2025-09-08 10:04:04][350961874913436][1163 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:04:04][350961874913436][1163 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350961874913436\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9350\"}'\'' -e'"" [2025-09-08 10:04:09][350961874913436][5708 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25b1f03d-26b6-4e89-bd86-5b112bc92a9d","id":"QR_25b1f03d-26b6-4e89-bd86-5b112bc92a9d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:04:09][350961874913436][5864 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-08 10:04:09][350961874913436][5864 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-09-08 10:04:09][350961874913436][5864 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:04:12][350961874913436][0 ms][INFO] === Request start === [2025-09-08 10:04:12][350961874913436][1 ms][DEBUG] START check_scloud [2025-09-08 10:04:12][350961874913436][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:04:12][350961874913436][337 ms][DEBUG] SU: done in 336 ms; outu0_a118 21113 5021 24607564 147864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:04:12][350961874913436][337 ms][DEBUG] targetPkg: running [2025-09-08 10:04:12][350961874913436][337 ms][DEBUG] END check_scloud in 337 ms [2025-09-08 10:04:12][350961874913436][337 ms][DEBUG] START check_boot_completed [2025-09-08 10:04:12][350961874913436][337 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:04:12][350961874913436][384 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:04:12][350961874913436][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:04:12][350961874913436][447 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 10:04:12][350961874913436][447 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 10:04:12][350961874913436][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:04:12][350961874913436][572 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3254\nsuccessfulTxPacketsPerSecond: 0.15615240474703326\nretriedTxPackets: 632\nretriedTxPacketsPerSecond: 0.03903810118675832\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3071\nsuccessfulRxPacketsPerSecond: 0.16591193004372276\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:04:12][350961874913436][572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:04:12][350961874913436][915 ms][DEBUG] SU: done in 343 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.426/228.426/228.426/0.000 ms\n [2025-09-08 10:04:12][350961874913436][915 ms][DEBUG] check_internet: online [2025-09-08 10:04:12][350961874913436][915 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:04:12][350961874913436][915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350961874913436\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7642\"}'\'' -e'"" [2025-09-08 10:04:12][350961874913436][915 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:04:12][350961874913436][915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350961874913436\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7642\"}'\'' -e'"" [2025-09-08 10:04:18][350961874913436][6789 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ca303c8-371d-48c9-81cf-3cb585b98653","id":"QR_7ca303c8-371d-48c9-81cf-3cb585b98653","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:04:18][350961874913436][6945 ms][DEBUG] proc_open done in 6030 ms; code=255; res.len=3343 [2025-09-08 10:04:18][350961874913436][6945 ms][DEBUG] END runCmdUntilRes#1 in 6030 ms [2025-09-08 10:04:18][350961874913436][6945 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:05:03][352978605213207][0 ms][INFO] === Request start === [2025-09-08 10:05:03][352978605213207][1 ms][DEBUG] START check_scloud [2025-09-08 10:05:03][352978605213207][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:05:03][352978605213207][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 21113 5021 24713100 159332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:05:03][352978605213207][324 ms][DEBUG] targetPkg: running [2025-09-08 10:05:03][352978605213207][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-08 10:05:03][352978605213207][324 ms][DEBUG] START check_boot_completed [2025-09-08 10:05:03][352978605213207][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:05:03][352978605213207][370 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:05:03][352978605213207][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:05:03][352978605213207][417 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:05:03][352978605213207][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 10:05:03][352978605213207][417 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:05:03][352978605213207][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978605213207\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7418\"}'\'' -e'"" [2025-09-08 10:05:03][352978605213207][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:05:03][352978605213207][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978605213207\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7418\"}'\'' -e'"" [2025-09-08 10:05:07][352978605213207][3635 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4c86232-795a-4921-b00d-8b584ceca632","id":"QR_d4c86232-795a-4921-b00d-8b584ceca632","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:05:07][352978605213207][3791 ms][DEBUG] proc_open done in 3374 ms; code=255; res.len=3343 [2025-09-08 10:05:07][352978605213207][3791 ms][DEBUG] END runCmdUntilRes#1 in 3374 ms [2025-09-08 10:05:07][352978605213207][3791 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:05:09][352978605213207][0 ms][INFO] === Request start === [2025-09-08 10:05:09][352978605213207][1 ms][DEBUG] START check_scloud [2025-09-08 10:05:09][352978605213207][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:05:09][352978605213207][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 21113 5021 24843416 169676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:05:09][352978605213207][309 ms][DEBUG] targetPkg: running [2025-09-08 10:05:09][352978605213207][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 10:05:09][352978605213207][309 ms][DEBUG] START check_boot_completed [2025-09-08 10:05:09][352978605213207][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:05:09][352978605213207][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:05:09][352978605213207][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:05:09][352978605213207][433 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 10:05:09][352978605213207][433 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 10:05:09][352978605213207][433 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:05:09][352978605213207][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978605213207\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9300\"}'\'' -e'"" [2025-09-08 10:05:09][352978605213207][434 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:05:09][352978605213207][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978605213207\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9300\"}'\'' -e'"" [2025-09-08 10:05:14][352978605213207][4635 ms][DEBUG] proc_open done in 4201 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 10:05:14][352978605213207][4635 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-08 10:05:14][352978605213207][4635 ms][WARN] Detected error: Process with pid 21113 either refused to load frida-agent, or terminated during injectionProcess with pid 21113 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 10:05:14][352978605213207][4635 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 10:05:14][352978605213207][4885 ms][DEBUG] SU: done in 250 ms; outsystem 5440 5021 12551480 191964 ep_poll 0 S system_server\n [2025-09-08 10:05:14][352978605213207][4885 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 10:05:14][352978605213207][5026 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 10:05:14][352978605213207][5026 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 10:05:14][352978605213207][5026 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 10:05:14][352978605213207][5151 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 10:05:14][352978605213207][5151 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 10:05:14][352978605213207][5370 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 10:05:16][352978605213207][7385 ms][DEBUG] START check_boot_completed [2025-09-08 10:05:16][352978605213207][7385 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:05:16][352978605213207][7432 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:05:16][352978605213207][7432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:05:17][352978605213207][7479 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:05:17][352978605213207][7479 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 10:05:20][352978605213207][10493 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 10:05:20][352978605213207][10493 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978605213207\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9300\"}'\'' -e'"" [2025-09-08 10:05:25][352978605213207][16273 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4c4c502-8eb1-4da8-a506-31f9f156bdce","id":"QR_f4c4c502-8eb1-4da8-a506-31f9f156bdce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:05:25][352978605213207][16430 ms][DEBUG] proc_open done in 5936 ms; code=255; res.len=3343 [2025-09-08 10:05:25][352978605213207][16430 ms][DEBUG] END runCmdUntilRes#2 in 5936 ms [2025-09-08 10:05:25][352978605213207][16430 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:08:04][355820494246657][1 ms][INFO] === Request start === [2025-09-08 10:08:04][355820494246657][1 ms][DEBUG] START check_scloud [2025-09-08 10:08:04][355820494246657][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:08:04][355820494246657][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 24767 5021 23487244 127152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:08:04][355820494246657][308 ms][DEBUG] targetPkg: running [2025-09-08 10:08:04][355820494246657][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 10:08:04][355820494246657][308 ms][DEBUG] START check_boot_completed [2025-09-08 10:08:04][355820494246657][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:08:04][355820494246657][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:08:04][355820494246657][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:08:04][355820494246657][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:08:04][355820494246657][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 10:08:04][355820494246657][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:08:05][355820494246657][497 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3254\nsuccessfulTxPacketsPerSecond: 0.15615240474703326\nretriedTxPackets: 632\nretriedTxPacketsPerSecond: 0.03903810118675832\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3071\nsuccessfulRxPacketsPerSecond: 0.16591193004372276\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:08:05][355820494246657][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:08:05][355820494246657][839 ms][DEBUG] SU: done in 342 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.939/231.939/231.939/0.000 ms\n [2025-09-08 10:08:05][355820494246657][839 ms][DEBUG] check_internet: online [2025-09-08 10:08:05][355820494246657][840 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:08:05][355820494246657][840 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355820494246657\",\"model\":\"SM-A326U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6825\"}'\'' -e'"" [2025-09-08 10:08:05][355820494246657][840 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:08:05][355820494246657][840 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355820494246657\",\"model\":\"SM-A326U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6825\"}'\'' -e'"" [2025-09-08 10:08:11][355820494246657][7025 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7c7bef0-d324-4717-bee3-4136b4898548","id":"QR_c7c7bef0-d324-4717-bee3-4136b4898548","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:08:11][355820494246657][7181 ms][DEBUG] proc_open done in 6341 ms; code=255; res.len=3343 [2025-09-08 10:08:11][355820494246657][7181 ms][DEBUG] END runCmdUntilRes#1 in 6342 ms [2025-09-08 10:08:11][355820494246657][7182 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:08:15][355820494246657][0 ms][INFO] === Request start === [2025-09-08 10:08:15][355820494246657][1 ms][DEBUG] START check_scloud [2025-09-08 10:08:15][355820494246657][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:08:15][355820494246657][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 24767 5021 23624660 137752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:08:15][355820494246657][317 ms][DEBUG] targetPkg: running [2025-09-08 10:08:15][355820494246657][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 10:08:15][355820494246657][317 ms][DEBUG] START check_boot_completed [2025-09-08 10:08:15][355820494246657][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:08:15][355820494246657][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:08:15][355820494246657][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:08:15][355820494246657][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:08:15][355820494246657][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 10:08:15][355820494246657][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:08:15][355820494246657][520 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3254\nsuccessfulTxPacketsPerSecond: 0.15615240474703326\nretriedTxPackets: 632\nretriedTxPacketsPerSecond: 0.03903810118675832\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3071\nsuccessfulRxPacketsPerSecond: 0.16591193004372276\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:08:15][355820494246657][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:08:16][355820494246657][864 ms][DEBUG] SU: done in 343 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=235 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 235.407/235.407/235.407/0.000 ms\n [2025-09-08 10:08:16][355820494246657][864 ms][DEBUG] check_internet: online [2025-09-08 10:08:16][355820494246657][864 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:08:16][355820494246657][864 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355820494246657\",\"model\":\"SM-A326U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9776\"}'\'' -e'"" [2025-09-08 10:08:16][355820494246657][864 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:08:16][355820494246657][864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355820494246657\",\"model\":\"SM-A326U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9776\"}'\'' -e'"" [2025-09-08 10:08:20][355820494246657][4894 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_423c0c14-f569-4d09-8a9d-c19d56bc2596","id":"QR_423c0c14-f569-4d09-8a9d-c19d56bc2596","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:08:20][355820494246657][5050 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-08 10:08:20][355820494246657][5050 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-08 10:08:20][355820494246657][5050 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:10:04][353255360311305][0 ms][INFO] === Request start === [2025-09-08 10:10:04][353255360311305][1 ms][DEBUG] START check_scloud [2025-09-08 10:10:04][353255360311305][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:10:04][353255360311305][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 24767 5021 23737300 149616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:10:04][353255360311305][316 ms][DEBUG] targetPkg: running [2025-09-08 10:10:04][353255360311305][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 10:10:04][353255360311305][316 ms][DEBUG] START check_boot_completed [2025-09-08 10:10:04][353255360311305][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:10:04][353255360311305][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:10:04][353255360311305][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:10:04][353255360311305][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:10:04][353255360311305][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 10:10:04][353255360311305][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:10:05][353255360311305][504 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3496\nsuccessfulTxPacketsPerSecond: 0.03390232953661998\nretriedTxPackets: 716\nretriedTxPacketsPerSecond: 0.03390232806222019\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3271\nsuccessfulRxPacketsPerSecond: 0.03390232914469092\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:10:05][353255360311305][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:10:06][353255360311305][2237 ms][DEBUG] SU: done in 1733 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.043/199.043/199.043/0.000 ms\n [2025-09-08 10:10:06][353255360311305][2237 ms][DEBUG] check_internet: online [2025-09-08 10:10:06][353255360311305][2237 ms][DEBUG] rawBody.length=1149 [2025-09-08 10:10:06][353255360311305][2237 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353255360311305\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6279\"}'\'' -e'"" [2025-09-08 10:10:06][353255360311305][2237 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:10:06][353255360311305][2237 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353255360311305\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6279\"}'\'' -e'"" [2025-09-08 10:10:10][353255360311305][6080 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f9ce17ef-5dbb-4e1e-a756-33b1585eb626","id":"QR_f9ce17ef-5dbb-4e1e-a756-33b1585eb626","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:10:10][353255360311305][6236 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-09-08 10:10:10][353255360311305][6236 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-08 10:10:10][353255360311305][6236 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:10:13][353255360311305][1 ms][INFO] === Request start === [2025-09-08 10:10:13][353255360311305][1 ms][DEBUG] START check_scloud [2025-09-08 10:10:13][353255360311305][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:10:13][353255360311305][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 24767 5021 23861404 160600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:10:13][353255360311305][287 ms][DEBUG] targetPkg: running [2025-09-08 10:10:13][353255360311305][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-08 10:10:13][353255360311305][287 ms][DEBUG] START check_boot_completed [2025-09-08 10:10:13][353255360311305][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:10:13][353255360311305][334 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:10:13][353255360311305][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:10:13][353255360311305][396 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 10:10:13][353255360311305][396 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 10:10:13][353255360311305][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:10:13][353255360311305][521 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3496\nsuccessfulTxPacketsPerSecond: 0.03390232953661998\nretriedTxPackets: 716\nretriedTxPacketsPerSecond: 0.03390232806222019\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3271\nsuccessfulRxPacketsPerSecond: 0.03390232914469092\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:10:13][353255360311305][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:10:13][353255360311305][833 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.981/163.981/163.981/0.000 ms\n [2025-09-08 10:10:13][353255360311305][834 ms][DEBUG] check_internet: online [2025-09-08 10:10:13][353255360311305][834 ms][DEBUG] rawBody.length=1159 [2025-09-08 10:10:13][353255360311305][834 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353255360311305\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4964\"}'\'' -e'"" [2025-09-08 10:10:13][353255360311305][834 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:10:13][353255360311305][834 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353255360311305\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4964\"}'\'' -e'"" [2025-09-08 10:10:19][353255360311305][6066 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f74803b8-33fe-4bef-987c-4c4fc2e17e4e","id":"QR_f74803b8-33fe-4bef-987c-4c4fc2e17e4e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:10:19][353255360311305][6223 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-08 10:10:19][353255360311305][6223 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-08 10:10:19][353255360311305][6223 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:12:03][355088507620181][0 ms][INFO] === Request start === [2025-09-08 10:12:03][355088507620181][0 ms][DEBUG] START check_scloud [2025-09-08 10:12:03][355088507620181][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:12:04][355088507620181][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 24767 5021 24027448 171520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:12:04][355088507620181][302 ms][DEBUG] targetPkg: running [2025-09-08 10:12:04][355088507620181][302 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 10:12:04][355088507620181][302 ms][DEBUG] START check_boot_completed [2025-09-08 10:12:04][355088507620181][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:12:04][355088507620181][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:12:04][355088507620181][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:12:04][355088507620181][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:12:04][355088507620181][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 10:12:04][355088507620181][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:12:04][355088507620181][489 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3496\nsuccessfulTxPacketsPerSecond: 0.03390232953661998\nretriedTxPackets: 716\nretriedTxPacketsPerSecond: 0.03390232806222019\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3271\nsuccessfulRxPacketsPerSecond: 0.03390232914469092\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:12:04][355088507620181][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:12:04][355088507620181][864 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=272 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 272.075/272.075/272.075/0.000 ms\n [2025-09-08 10:12:04][355088507620181][864 ms][DEBUG] check_internet: online [2025-09-08 10:12:04][355088507620181][864 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:12:04][355088507620181][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088507620181\",\"model\":\"SM-A356B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1868\"}'\'' -e'"" [2025-09-08 10:12:04][355088507620181][865 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:12:04][355088507620181][865 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088507620181\",\"model\":\"SM-A356B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1868\"}'\'' -e'"" [2025-09-08 10:12:09][355088507620181][5316 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9fc392e-b129-4fd1-b263-2f6eebacf1a1","id":"QR_d9fc392e-b129-4fd1-b263-2f6eebacf1a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:12:09][355088507620181][5473 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-08 10:12:09][355088507620181][5473 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-08 10:12:09][355088507620181][5473 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:12:11][355088507620181][0 ms][INFO] === Request start === [2025-09-08 10:12:11][355088507620181][0 ms][DEBUG] START check_scloud [2025-09-08 10:12:11][355088507620181][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:12:11][355088507620181][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 24767 5021 24196672 183036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:12:11][355088507620181][299 ms][DEBUG] targetPkg: running [2025-09-08 10:12:11][355088507620181][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 10:12:11][355088507620181][299 ms][DEBUG] START check_boot_completed [2025-09-08 10:12:11][355088507620181][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:12:11][355088507620181][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:12:11][355088507620181][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:12:11][355088507620181][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:12:11][355088507620181][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 10:12:11][355088507620181][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:12:12][355088507620181][487 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3496\nsuccessfulTxPacketsPerSecond: 0.03390232953661998\nretriedTxPackets: 716\nretriedTxPacketsPerSecond: 0.03390232806222019\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3271\nsuccessfulRxPacketsPerSecond: 0.03390232914469092\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:12:12][355088507620181][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:12:12][355088507620181][752 ms][DEBUG] SU: done in 265 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.424/164.424/164.424/0.000 ms\n [2025-09-08 10:12:12][355088507620181][752 ms][DEBUG] check_internet: online [2025-09-08 10:12:12][355088507620181][752 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:12:12][355088507620181][752 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088507620181\",\"model\":\"SM-A356B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9696\"}'\'' -e'"" [2025-09-08 10:12:12][355088507620181][752 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:12:12][355088507620181][752 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088507620181\",\"model\":\"SM-A356B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9696\"}'\'' -e'"" [2025-09-08 10:12:17][355088507620181][5720 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3a89c5b-0327-42a7-bce2-eca38103a9fb","id":"QR_f3a89c5b-0327-42a7-bce2-eca38103a9fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:12:17][355088507620181][5876 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-08 10:12:17][355088507620181][5876 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-08 10:12:17][355088507620181][5876 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:13:03][351397294831529][1 ms][INFO] === Request start === [2025-09-08 10:13:03][351397294831529][1 ms][DEBUG] START check_scloud [2025-09-08 10:13:03][351397294831529][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:13:04][351397294831529][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 24767 5021 24341248 194452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:13:04][351397294831529][317 ms][DEBUG] targetPkg: running [2025-09-08 10:13:04][351397294831529][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 10:13:04][351397294831529][318 ms][DEBUG] START check_boot_completed [2025-09-08 10:13:04][351397294831529][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:13:04][351397294831529][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:13:04][351397294831529][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:13:04][351397294831529][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 10:13:04][351397294831529][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 10:13:04][351397294831529][427 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:13:04][351397294831529][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351397294831529\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5151\"}'\'' -e'"" [2025-09-08 10:13:04][351397294831529][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:13:04][351397294831529][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351397294831529\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5151\"}'\'' -e'"" [2025-09-08 10:13:07][351397294831529][3879 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_234be9f8-492f-4595-a04a-ac4b72549a52","id":"QR_234be9f8-492f-4595-a04a-ac4b72549a52","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:13:07][351397294831529][4035 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-08 10:13:07][351397294831529][4035 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-08 10:13:07][351397294831529][4035 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:13:10][351397294831529][0 ms][INFO] === Request start === [2025-09-08 10:13:10][351397294831529][1 ms][DEBUG] START check_scloud [2025-09-08 10:13:10][351397294831529][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:13:10][351397294831529][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 24767 5021 24461320 206316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:13:10][351397294831529][258 ms][DEBUG] targetPkg: running [2025-09-08 10:13:10][351397294831529][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-08 10:13:10][351397294831529][258 ms][DEBUG] START check_boot_completed [2025-09-08 10:13:10][351397294831529][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:13:10][351397294831529][304 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:13:10][351397294831529][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:13:10][351397294831529][353 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 10:13:10][351397294831529][353 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 10:13:10][351397294831529][353 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:13:10][351397294831529][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351397294831529\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3365\"}'\'' -e'"" [2025-09-08 10:13:10][351397294831529][354 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:13:10][351397294831529][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351397294831529\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3365\"}'\'' -e'"" [2025-09-08 10:13:15][351397294831529][5100 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d984024-f0cf-43eb-b0d8-a86b02acbeeb","id":"QR_4d984024-f0cf-43eb-b0d8-a86b02acbeeb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:13:15][351397294831529][5256 ms][DEBUG] proc_open done in 4903 ms; code=255; res.len=3343 [2025-09-08 10:13:15][351397294831529][5256 ms][DEBUG] END runCmdUntilRes#1 in 4903 ms [2025-09-08 10:13:15][351397294831529][5257 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:18:03][355382704921827][1 ms][INFO] === Request start === [2025-09-08 10:18:03][355382704921827][1 ms][DEBUG] START check_scloud [2025-09-08 10:18:03][355382704921827][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:18:04][355382704921827][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 24767 5021 24609992 215452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:18:04][355382704921827][321 ms][DEBUG] targetPkg: running [2025-09-08 10:18:04][355382704921827][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-08 10:18:04][355382704921827][321 ms][DEBUG] START check_boot_completed [2025-09-08 10:18:04][355382704921827][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:18:04][355382704921827][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:18:04][355382704921827][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:18:04][355382704921827][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:18:04][355382704921827][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 10:18:04][355382704921827][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:18:04][355382704921827][524 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3710\nsuccessfulTxPacketsPerSecond: 0.8840345021315972\nretriedTxPackets: 776\nretriedTxPacketsPerSecond: 0.24786014078455998\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3457\nsuccessfulRxPacketsPerSecond: 0.7683664364321359\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:18:04][355382704921827][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:18:05][355382704921827][1775 ms][DEBUG] SU: done in 1250 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.024/193.024/193.024/0.000 ms\n [2025-09-08 10:18:05][355382704921827][1775 ms][DEBUG] check_internet: online [2025-09-08 10:18:05][355382704921827][1775 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:18:05][355382704921827][1775 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382704921827\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2707\"}'\'' -e'"" [2025-09-08 10:18:05][355382704921827][1775 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:18:05][355382704921827][1775 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382704921827\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2707\"}'\'' -e'"" [2025-09-08 10:18:09][355382704921827][5601 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b158b69-61d1-47ec-b4ab-3061913aa289","id":"QR_5b158b69-61d1-47ec-b4ab-3061913aa289","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:18:09][355382704921827][5757 ms][DEBUG] proc_open done in 3982 ms; code=255; res.len=3343 [2025-09-08 10:18:09][355382704921827][5757 ms][DEBUG] END runCmdUntilRes#1 in 3982 ms [2025-09-08 10:18:09][355382704921827][5757 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:18:11][355382704921827][0 ms][INFO] === Request start === [2025-09-08 10:18:11][355382704921827][1 ms][DEBUG] START check_scloud [2025-09-08 10:18:11][355382704921827][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:18:12][355382704921827][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 24767 5021 24754000 205888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:18:12][355382704921827][277 ms][DEBUG] targetPkg: running [2025-09-08 10:18:12][355382704921827][277 ms][DEBUG] END check_scloud in 276 ms [2025-09-08 10:18:12][355382704921827][277 ms][DEBUG] START check_boot_completed [2025-09-08 10:18:12][355382704921827][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:18:12][355382704921827][323 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:18:12][355382704921827][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:18:12][355382704921827][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:18:12][355382704921827][370 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 10:18:12][355382704921827][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:18:12][355382704921827][480 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3710\nsuccessfulTxPacketsPerSecond: 0.8840345021315972\nretriedTxPackets: 776\nretriedTxPacketsPerSecond: 0.24786014078455998\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3457\nsuccessfulRxPacketsPerSecond: 0.7683664364321359\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:18:12][355382704921827][480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:18:12][355382704921827][808 ms][DEBUG] SU: done in 327 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=209 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 209.396/209.396/209.396/0.000 ms\n [2025-09-08 10:18:12][355382704921827][808 ms][DEBUG] check_internet: online [2025-09-08 10:18:12][355382704921827][808 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:18:12][355382704921827][808 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382704921827\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2683\"}'\'' -e'"" [2025-09-08 10:18:12][355382704921827][808 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:18:12][355382704921827][808 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382704921827\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2683\"}'\'' -e'"" [2025-09-08 10:18:17][355382704921827][6056 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4093d9c2-73f7-4305-ac8c-75998789b8d4","id":"QR_4093d9c2-73f7-4305-ac8c-75998789b8d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:18:18][355382704921827][6212 ms][DEBUG] proc_open done in 5405 ms; code=255; res.len=3343 [2025-09-08 10:18:18][355382704921827][6212 ms][DEBUG] END runCmdUntilRes#1 in 5405 ms [2025-09-08 10:18:18][355382704921827][6213 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:19:03][354468114562763][0 ms][INFO] === Request start === [2025-09-08 10:19:03][354468114562763][1 ms][DEBUG] START check_scloud [2025-09-08 10:19:03][354468114562763][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:19:03][354468114562763][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 24767 5021 24886288 218100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:19:03][354468114562763][301 ms][DEBUG] targetPkg: running [2025-09-08 10:19:03][354468114562763][301 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 10:19:03][354468114562763][302 ms][DEBUG] START check_boot_completed [2025-09-08 10:19:03][354468114562763][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:19:03][354468114562763][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:19:03][354468114562763][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:19:04][354468114562763][442 ms][DEBUG] SU: done in 93 ms; out [2025-09-08 10:19:04][354468114562763][442 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 10:19:04][354468114562763][442 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:19:04][354468114562763][442 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354468114562763\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5530\"}'\'' -e'"" [2025-09-08 10:19:04][354468114562763][442 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:19:04][354468114562763][442 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354468114562763\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5530\"}'\'' -e'"" [2025-09-08 10:19:07][354468114562763][4316 ms][DEBUG] proc_open done in 3874 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 10:19:07][354468114562763][4316 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-08 10:19:07][354468114562763][4316 ms][WARN] Detected error: Process with pid 24767 either refused to load frida-agent, or terminated during injectionProcess with pid 24767 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 10:19:07][354468114562763][4316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 10:19:08][354468114562763][4581 ms][DEBUG] SU: done in 265 ms; outsystem 5440 5021 12644880 208856 ep_poll 0 S system_server\n [2025-09-08 10:19:08][354468114562763][4581 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 10:19:08][354468114562763][4708 ms][DEBUG] SU: done in 126 ms; out [2025-09-08 10:19:08][354468114562763][4708 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 10:19:08][354468114562763][4708 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 10:19:08][354468114562763][4831 ms][DEBUG] SU: done in 124 ms; out [2025-09-08 10:19:08][354468114562763][4832 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 10:19:08][354468114562763][5050 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 10:19:10][354468114562763][7065 ms][DEBUG] START check_boot_completed [2025-09-08 10:19:10][354468114562763][7065 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:19:10][354468114562763][7112 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:19:10][354468114562763][7112 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:19:10][354468114562763][7159 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:19:10][354468114562763][7159 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 10:19:13][354468114562763][10174 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 10:19:13][354468114562763][10174 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354468114562763\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5530\"}'\'' -e'"" [2025-09-08 10:19:17][354468114562763][13814 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de3a0525-dd68-47d8-9773-37822409a713","id":"QR_de3a0525-dd68-47d8-9773-37822409a713","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:19:17][354468114562763][13970 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=3343 [2025-09-08 10:19:17][354468114562763][13970 ms][DEBUG] END runCmdUntilRes#2 in 3796 ms [2025-09-08 10:19:17][354468114562763][13970 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:19:20][354468114562763][0 ms][INFO] === Request start === [2025-09-08 10:19:20][354468114562763][1 ms][DEBUG] START check_scloud [2025-09-08 10:19:20][354468114562763][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:19:20][354468114562763][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 27183 5021 23586912 124200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:19:20][354468114562763][258 ms][DEBUG] targetPkg: running [2025-09-08 10:19:20][354468114562763][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-08 10:19:20][354468114562763][258 ms][DEBUG] START check_boot_completed [2025-09-08 10:19:20][354468114562763][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:19:20][354468114562763][305 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:19:20][354468114562763][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:19:20][354468114562763][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:19:20][354468114562763][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 10:19:20][354468114562763][351 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:19:20][354468114562763][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354468114562763\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8812\"}'\'' -e'"" [2025-09-08 10:19:20][354468114562763][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:19:20][354468114562763][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354468114562763\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8812\"}'\'' -e'"" [2025-09-08 10:19:25][354468114562763][5319 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6d119052-e6ac-4207-96c4-13aae9615981","id":"QR_6d119052-e6ac-4207-96c4-13aae9615981","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:19:25][354468114562763][5475 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-08 10:19:25][354468114562763][5475 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-08 10:19:25][354468114562763][5476 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:20:04][352397452031457][1 ms][INFO] === Request start === [2025-09-08 10:20:04][352397452031457][1 ms][DEBUG] START check_scloud [2025-09-08 10:20:04][352397452031457][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:20:04][352397452031457][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 27183 5021 23674876 137980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:20:04][352397452031457][323 ms][DEBUG] targetPkg: running [2025-09-08 10:20:04][352397452031457][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-08 10:20:04][352397452031457][323 ms][DEBUG] START check_boot_completed [2025-09-08 10:20:04][352397452031457][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:20:04][352397452031457][370 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:20:04][352397452031457][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:20:04][352397452031457][417 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:20:04][352397452031457][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 10:20:04][352397452031457][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:20:04][352397452031457][526 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3797\nsuccessfulTxPacketsPerSecond: 0.28888682277623556\nretriedTxPackets: 807\nretriedTxPacketsPerSecond: 0.10293668397773911\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3526\nsuccessfulRxPacketsPerSecond: 0.2291171353052903\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:20:04][352397452031457][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:20:04][352397452031457][887 ms][DEBUG] SU: done in 360 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=260 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 260.847/260.847/260.847/0.000 ms\n [2025-09-08 10:20:04][352397452031457][887 ms][DEBUG] check_internet: online [2025-09-08 10:20:04][352397452031457][887 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:20:04][352397452031457][887 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452031457\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8151\"}'\'' -e'"" [2025-09-08 10:20:04][352397452031457][887 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:20:04][352397452031457][887 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452031457\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8151\"}'\'' -e'"" [2025-09-08 10:20:08][352397452031457][4306 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_82b83e2b-6218-4694-97d5-9e7b5e9c72e2","id":"QR_82b83e2b-6218-4694-97d5-9e7b5e9c72e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:20:08][352397452031457][4463 ms][DEBUG] proc_open done in 3575 ms; code=255; res.len=3343 [2025-09-08 10:20:08][352397452031457][4463 ms][DEBUG] END runCmdUntilRes#1 in 3576 ms [2025-09-08 10:20:08][352397452031457][4463 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:20:10][352397452031457][0 ms][INFO] === Request start === [2025-09-08 10:20:10][352397452031457][1 ms][DEBUG] START check_scloud [2025-09-08 10:20:10][352397452031457][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:20:11][352397452031457][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 27183 5021 23824544 149296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:20:11][352397452031457][319 ms][DEBUG] targetPkg: running [2025-09-08 10:20:11][352397452031457][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 10:20:11][352397452031457][319 ms][DEBUG] START check_boot_completed [2025-09-08 10:20:11][352397452031457][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:20:11][352397452031457][366 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:20:11][352397452031457][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:20:11][352397452031457][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:20:11][352397452031457][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 10:20:11][352397452031457][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:20:11][352397452031457][522 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3797\nsuccessfulTxPacketsPerSecond: 0.28888682277623556\nretriedTxPackets: 807\nretriedTxPacketsPerSecond: 0.10293668397773911\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3526\nsuccessfulRxPacketsPerSecond: 0.2291171353052903\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:20:11][352397452031457][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:20:11][352397452031457][819 ms][DEBUG] SU: done in 296 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.749/198.749/198.749/0.000 ms\n [2025-09-08 10:20:11][352397452031457][819 ms][DEBUG] check_internet: online [2025-09-08 10:20:11][352397452031457][819 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:20:11][352397452031457][819 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452031457\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6796\"}'\'' -e'"" [2025-09-08 10:20:11][352397452031457][819 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:20:11][352397452031457][819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452031457\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6796\"}'\'' -e'"" [2025-09-08 10:20:16][352397452031457][5458 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e1efbd5-b93f-4206-b821-f1780bbea688","id":"QR_0e1efbd5-b93f-4206-b821-f1780bbea688","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:20:16][352397452031457][5614 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 10:20:16][352397452031457][5614 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 10:20:16][352397452031457][5614 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:21:03][352473674284800][0 ms][INFO] === Request start === [2025-09-08 10:21:03][352473674284800][1 ms][DEBUG] START check_scloud [2025-09-08 10:21:03][352473674284800][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:21:04][352473674284800][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 27183 5021 23962400 160328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:21:04][352473674284800][311 ms][DEBUG] targetPkg: running [2025-09-08 10:21:04][352473674284800][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 10:21:04][352473674284800][311 ms][DEBUG] START check_boot_completed [2025-09-08 10:21:04][352473674284800][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:21:04][352473674284800][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:21:04][352473674284800][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:21:04][352473674284800][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:21:04][352473674284800][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 10:21:04][352473674284800][389 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:21:04][352473674284800][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352473674284800\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2520\"}'\'' -e'"" [2025-09-08 10:21:04][352473674284800][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:21:04][352473674284800][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352473674284800\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2520\"}'\'' -e'"" [2025-09-08 10:21:08][352473674284800][4966 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_09b73b01-2964-4fbd-8835-6d0b895cf111","id":"QR_09b73b01-2964-4fbd-8835-6d0b895cf111","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:21:09][352473674284800][5122 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-08 10:21:09][352473674284800][5123 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-08 10:21:09][352473674284800][5123 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:21:11][352473674284800][0 ms][INFO] === Request start === [2025-09-08 10:21:11][352473674284800][1 ms][DEBUG] START check_scloud [2025-09-08 10:21:11][352473674284800][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:21:11][352473674284800][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 27183 5021 24089436 171252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:21:11][352473674284800][323 ms][DEBUG] targetPkg: running [2025-09-08 10:21:11][352473674284800][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-08 10:21:11][352473674284800][323 ms][DEBUG] START check_boot_completed [2025-09-08 10:21:11][352473674284800][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:21:11][352473674284800][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:21:11][352473674284800][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:21:11][352473674284800][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:21:11][352473674284800][416 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 10:21:11][352473674284800][416 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:21:11][352473674284800][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352473674284800\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5102\"}'\'' -e'"" [2025-09-08 10:21:11][352473674284800][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:21:11][352473674284800][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352473674284800\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5102\"}'\'' -e'"" [2025-09-08 10:21:16][352473674284800][5337 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3084adf-4fa7-4794-bb89-b3cde02db919","id":"QR_a3084adf-4fa7-4794-bb89-b3cde02db919","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:21:16][352473674284800][5493 ms][DEBUG] proc_open done in 5076 ms; code=255; res.len=3343 [2025-09-08 10:21:16][352473674284800][5493 ms][DEBUG] END runCmdUntilRes#1 in 5076 ms [2025-09-08 10:21:16][352473674284800][5493 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:27:03][350246959588315][1 ms][INFO] === Request start === [2025-09-08 10:27:03][350246959588315][1 ms][DEBUG] START check_scloud [2025-09-08 10:27:03][350246959588315][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:27:03][350246959588315][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 27183 5021 24216660 183836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:27:03][350246959588315][305 ms][DEBUG] targetPkg: running [2025-09-08 10:27:03][350246959588315][305 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 10:27:03][350246959588315][305 ms][DEBUG] START check_boot_completed [2025-09-08 10:27:03][350246959588315][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:27:03][350246959588315][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:27:03][350246959588315][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:27:03][350246959588315][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:27:03][350246959588315][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 10:27:03][350246959588315][383 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:27:03][350246959588315][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246959588315\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1589\"}'\'' -e'"" [2025-09-08 10:27:03][350246959588315][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:27:03][350246959588315][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246959588315\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1589\"}'\'' -e'"" [2025-09-08 10:27:08][350246959588315][5569 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35cd234e-4d86-4406-8101-a4c193736d17","id":"QR_35cd234e-4d86-4406-8101-a4c193736d17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:27:08][350246959588315][5725 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-09-08 10:27:08][350246959588315][5725 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-09-08 10:27:08][350246959588315][5725 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:27:11][350246959588315][1 ms][INFO] === Request start === [2025-09-08 10:27:11][350246959588315][1 ms][DEBUG] START check_scloud [2025-09-08 10:27:11][350246959588315][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:27:11][350246959588315][326 ms][DEBUG] SU: done in 326 ms; outu0_a118 27183 5021 24336604 193524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:27:11][350246959588315][327 ms][DEBUG] targetPkg: running [2025-09-08 10:27:11][350246959588315][327 ms][DEBUG] END check_scloud in 326 ms [2025-09-08 10:27:11][350246959588315][327 ms][DEBUG] START check_boot_completed [2025-09-08 10:27:11][350246959588315][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:27:11][350246959588315][358 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:27:11][350246959588315][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:27:11][350246959588315][406 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 10:27:11][350246959588315][406 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 10:27:11][350246959588315][406 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:27:11][350246959588315][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246959588315\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8068\"}'\'' -e'"" [2025-09-08 10:27:11][350246959588315][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:27:11][350246959588315][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246959588315\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8068\"}'\'' -e'"" [2025-09-08 10:27:16][350246959588315][5544 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_29a4068c-3816-4327-8ea1-eeee71c657e9","id":"QR_29a4068c-3816-4327-8ea1-eeee71c657e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:27:17][350246959588315][5700 ms][DEBUG] proc_open done in 5294 ms; code=255; res.len=3343 [2025-09-08 10:27:17][350246959588315][5700 ms][DEBUG] END runCmdUntilRes#1 in 5294 ms [2025-09-08 10:27:17][350246959588315][5700 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:27:21][350987615382342][0 ms][INFO] === Request start === [2025-09-08 10:27:21][350987615382342][1 ms][DEBUG] START check_scloud [2025-09-08 10:27:21][350987615382342][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:27:21][350987615382342][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 27183 5021 24516068 205372 ep_poll 0 R com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:27:21][350987615382342][309 ms][DEBUG] targetPkg: running [2025-09-08 10:27:21][350987615382342][309 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 10:27:21][350987615382342][309 ms][DEBUG] START check_boot_completed [2025-09-08 10:27:21][350987615382342][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:27:21][350987615382342][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:27:21][350987615382342][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:27:21][350987615382342][403 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 10:27:21][350987615382342][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 10:27:21][350987615382342][403 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:27:21][350987615382342][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615382342\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6905\"}'\'' -e'"" [2025-09-08 10:27:21][350987615382342][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:27:21][350987615382342][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615382342\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6905\"}'\'' -e'"" [2025-09-08 10:27:25][350987615382342][4293 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa2ae213-566b-46b6-abc8-1749f9fd63be","id":"QR_aa2ae213-566b-46b6-abc8-1749f9fd63be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:27:25][350987615382342][4449 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-09-08 10:27:25][350987615382342][4449 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-09-08 10:27:25][350987615382342][4449 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:27:27][350987615382342][0 ms][INFO] === Request start === [2025-09-08 10:27:27][350987615382342][1 ms][DEBUG] START check_scloud [2025-09-08 10:27:27][350987615382342][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:27:28][350987615382342][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 27183 5021 24638152 216076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:27:28][350987615382342][267 ms][DEBUG] targetPkg: running [2025-09-08 10:27:28][350987615382342][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-08 10:27:28][350987615382342][267 ms][DEBUG] START check_boot_completed [2025-09-08 10:27:28][350987615382342][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:27:28][350987615382342][298 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:27:28][350987615382342][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:27:28][350987615382342][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:27:28][350987615382342][345 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 10:27:28][350987615382342][345 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:27:28][350987615382342][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615382342\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2583\"}'\'' -e'"" [2025-09-08 10:27:28][350987615382342][345 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:27:28][350987615382342][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615382342\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2583\"}'\'' -e'"" [2025-09-08 10:27:32][350987615382342][5031 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34b12066-199c-407a-910c-51329a1c6480","id":"QR_34b12066-199c-407a-910c-51329a1c6480","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:27:33][350987615382342][5187 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-08 10:27:33][350987615382342][5187 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-08 10:27:33][350987615382342][5188 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:28:03][350042732709546][0 ms][INFO] === Request start === [2025-09-08 10:28:03][350042732709546][1 ms][DEBUG] START check_scloud [2025-09-08 10:28:03][350042732709546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:28:04][350042732709546][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 27183 5021 24718052 228148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:28:04][350042732709546][308 ms][DEBUG] targetPkg: running [2025-09-08 10:28:04][350042732709546][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 10:28:04][350042732709546][308 ms][DEBUG] START check_boot_completed [2025-09-08 10:28:04][350042732709546][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:28:04][350042732709546][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:28:04][350042732709546][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:28:04][350042732709546][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 10:28:04][350042732709546][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 10:28:04][350042732709546][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:28:04][350042732709546][557 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3955\nsuccessfulTxPacketsPerSecond: 0.5247112427686156\nretriedTxPackets: 855\nretriedTxPacketsPerSecond: 0.15940594717021234\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3665\nsuccessfulRxPacketsPerSecond: 0.46161305534707325\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:28:04][350042732709546][557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:28:05][350042732709546][2026 ms][DEBUG] SU: done in 1468 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.160/190.160/190.160/0.000 ms\n [2025-09-08 10:28:05][350042732709546][2026 ms][DEBUG] check_internet: online [2025-09-08 10:28:05][350042732709546][2026 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:28:05][350042732709546][2026 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042732709546\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6920\"}'\'' -e'"" [2025-09-08 10:28:05][350042732709546][2026 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:28:05][350042732709546][2026 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042732709546\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6920\"}'\'' -e'"" [2025-09-08 10:28:09][350042732709546][6040 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5fc64747-1efc-470e-9833-6b4c0f240f94","id":"QR_5fc64747-1efc-470e-9833-6b4c0f240f94","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:28:10][350042732709546][6196 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-09-08 10:28:10][350042732709546][6196 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-09-08 10:28:10][350042732709546][6196 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:28:12][350042732709546][0 ms][INFO] === Request start === [2025-09-08 10:28:12][350042732709546][1 ms][DEBUG] START check_scloud [2025-09-08 10:28:12][350042732709546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:28:12][350042732709546][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 27183 5021 24850284 239016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:28:12][350042732709546][314 ms][DEBUG] targetPkg: running [2025-09-08 10:28:12][350042732709546][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 10:28:12][350042732709546][314 ms][DEBUG] START check_boot_completed [2025-09-08 10:28:12][350042732709546][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:28:12][350042732709546][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:28:12][350042732709546][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:28:12][350042732709546][439 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 10:28:12][350042732709546][439 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 10:28:12][350042732709546][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:28:12][350042732709546][580 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3955\nsuccessfulTxPacketsPerSecond: 0.5247112427686156\nretriedTxPackets: 855\nretriedTxPacketsPerSecond: 0.15940594717021234\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3665\nsuccessfulRxPacketsPerSecond: 0.46161305534707325\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:28:12][350042732709546][580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:28:13][350042732709546][1002 ms][DEBUG] SU: done in 422 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=276 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 276.700/276.700/276.700/0.000 ms\n [2025-09-08 10:28:13][350042732709546][1002 ms][DEBUG] check_internet: online [2025-09-08 10:28:13][350042732709546][1002 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:28:13][350042732709546][1002 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042732709546\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6501\"}'\'' -e'"" [2025-09-08 10:28:13][350042732709546][1002 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:28:13][350042732709546][1002 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042732709546\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6501\"}'\'' -e'"" [2025-09-08 10:28:17][350042732709546][4657 ms][DEBUG] proc_open done in 3654 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 10:28:17][350042732709546][4657 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-08 10:28:17][350042732709546][4657 ms][WARN] Detected error: Process with pid 27183 either refused to load frida-agent, or terminated during injectionProcess with pid 27183 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 10:28:17][350042732709546][4657 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 10:28:17][350042732709546][4954 ms][DEBUG] SU: done in 297 ms; outsystem 5440 5021 12553968 194168 ep_poll 0 S system_server\n [2025-09-08 10:28:17][350042732709546][4954 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 10:28:17][350042732709546][5079 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 10:28:17][350042732709546][5079 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 10:28:17][350042732709546][5079 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 10:28:17][350042732709546][5219 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 10:28:17][350042732709546][5219 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 10:28:17][350042732709546][5391 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 10:28:19][350042732709546][7406 ms][DEBUG] START check_boot_completed [2025-09-08 10:28:19][350042732709546][7406 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:28:19][350042732709546][7453 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:28:19][350042732709546][7453 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:28:19][350042732709546][7500 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:28:19][350042732709546][7500 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 10:28:22][350042732709546][10515 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 10:28:22][350042732709546][10515 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042732709546\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6501\"}'\'' -e'"" [2025-09-08 10:28:27][350042732709546][15248 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2e8a9b8-c4de-4d14-b4e7-cc3c1de0438e","id":"QR_a2e8a9b8-c4de-4d14-b4e7-cc3c1de0438e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:28:27][350042732709546][15404 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-08 10:28:27][350042732709546][15404 ms][DEBUG] END runCmdUntilRes#2 in 4890 ms [2025-09-08 10:28:27][350042732709546][15404 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:30:03][357158620600796][1 ms][INFO] === Request start === [2025-09-08 10:30:03][357158620600796][1 ms][DEBUG] START check_scloud [2025-09-08 10:30:03][357158620600796][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:30:03][357158620600796][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 28511 5021 23499088 126364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:30:03][357158620600796][306 ms][DEBUG] targetPkg: running [2025-09-08 10:30:03][357158620600796][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 10:30:03][357158620600796][306 ms][DEBUG] START check_boot_completed [2025-09-08 10:30:03][357158620600796][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:30:03][357158620600796][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:30:03][357158620600796][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:30:03][357158620600796][400 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 10:30:03][357158620600796][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 10:30:03][357158620600796][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:30:04][357158620600796][540 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4130\nsuccessfulTxPacketsPerSecond: 0.5814958065845263\nretriedTxPackets: 915\nretriedTxPacketsPerSecond: 0.1993699908289804\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3808\nsuccessfulRxPacketsPerSecond: 0.47516514480907\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:30:04][357158620600796][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:30:04][357158620600796][884 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.310/201.310/201.310/0.000 ms\n [2025-09-08 10:30:04][357158620600796][884 ms][DEBUG] check_internet: online [2025-09-08 10:30:04][357158620600796][884 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:30:04][357158620600796][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357158620600796\",\"model\":\"SM-A236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5545\"}'\'' -e'"" [2025-09-08 10:30:04][357158620600796][884 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:30:04][357158620600796][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357158620600796\",\"model\":\"SM-A236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5545\"}'\'' -e'"" [2025-09-08 10:30:08][357158620600796][5336 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e060a57-960c-40ec-b125-b8c70520dd89","id":"QR_1e060a57-960c-40ec-b125-b8c70520dd89","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:30:09][357158620600796][5492 ms][DEBUG] proc_open done in 4607 ms; code=255; res.len=3343 [2025-09-08 10:30:09][357158620600796][5492 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-08 10:30:09][357158620600796][5492 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:30:11][357158620600796][0 ms][INFO] === Request start === [2025-09-08 10:30:11][357158620600796][1 ms][DEBUG] START check_scloud [2025-09-08 10:30:11][357158620600796][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:30:11][357158620600796][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 28511 5021 23633304 136748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:30:11][357158620600796][310 ms][DEBUG] targetPkg: running [2025-09-08 10:30:11][357158620600796][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 10:30:11][357158620600796][310 ms][DEBUG] START check_boot_completed [2025-09-08 10:30:11][357158620600796][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:30:11][357158620600796][354 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 10:30:11][357158620600796][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:30:11][357158620600796][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:30:11][357158620600796][401 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 10:30:11][357158620600796][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:30:11][357158620600796][511 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4130\nsuccessfulTxPacketsPerSecond: 0.5814958065845263\nretriedTxPackets: 915\nretriedTxPacketsPerSecond: 0.1993699908289804\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3808\nsuccessfulRxPacketsPerSecond: 0.47516514480907\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:30:11][357158620600796][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:30:12][357158620600796][901 ms][DEBUG] SU: done in 391 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.154/258.154/258.154/0.000 ms\n [2025-09-08 10:30:12][357158620600796][901 ms][DEBUG] check_internet: online [2025-09-08 10:30:12][357158620600796][902 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:30:12][357158620600796][902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357158620600796\",\"model\":\"SM-A236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3086\"}'\'' -e'"" [2025-09-08 10:30:12][357158620600796][902 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:30:12][357158620600796][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357158620600796\",\"model\":\"SM-A236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3086\"}'\'' -e'"" [2025-09-08 10:30:17][357158620600796][6119 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_989e16b7-287d-4948-96a6-0cebbddeaaf6","id":"QR_989e16b7-287d-4948-96a6-0cebbddeaaf6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:30:17][357158620600796][6275 ms][DEBUG] proc_open done in 5373 ms; code=255; res.len=3343 [2025-09-08 10:30:17][357158620600796][6275 ms][DEBUG] END runCmdUntilRes#1 in 5373 ms [2025-09-08 10:30:17][357158620600796][6275 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:34:03][357450471644282][1 ms][INFO] === Request start === [2025-09-08 10:34:03][357450471644282][1 ms][DEBUG] START check_scloud [2025-09-08 10:34:03][357450471644282][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:34:03][357450471644282][290 ms][DEBUG] SU: done in 288 ms; outu0_a118 28511 5021 23735820 149144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:34:03][357450471644282][290 ms][DEBUG] targetPkg: running [2025-09-08 10:34:03][357450471644282][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 10:34:03][357450471644282][290 ms][DEBUG] START check_boot_completed [2025-09-08 10:34:03][357450471644282][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:34:03][357450471644282][321 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:34:03][357450471644282][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:34:03][357450471644282][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:34:03][357450471644282][368 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 10:34:03][357450471644282][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:34:04][357450471644282][493 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4197\nsuccessfulTxPacketsPerSecond: 0.2225861857033225\nretriedTxPackets: 938\nretriedTxPacketsPerSecond: 0.07641018315188683\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3866\nsuccessfulRxPacketsPerSecond: 0.1926865488178016\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:34:04][357450471644282][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:34:05][357450471644282][1805 ms][DEBUG] SU: done in 1312 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.956/187.956/187.956/0.000 ms\n [2025-09-08 10:34:05][357450471644282][1805 ms][DEBUG] check_internet: online [2025-09-08 10:34:05][357450471644282][1805 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:34:05][357450471644282][1805 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450471644282\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8877\"}'\'' -e'"" [2025-09-08 10:34:05][357450471644282][1805 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:34:05][357450471644282][1805 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450471644282\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8877\"}'\'' -e'"" [2025-09-08 10:34:09][357450471644282][5554 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ebd3fc8-853d-4f05-a6be-77885d6f5820","id":"QR_0ebd3fc8-853d-4f05-a6be-77885d6f5820","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:34:09][357450471644282][5710 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-09-08 10:34:09][357450471644282][5710 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-08 10:34:09][357450471644282][5710 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:34:11][357450471644282][0 ms][INFO] === Request start === [2025-09-08 10:34:11][357450471644282][1 ms][DEBUG] START check_scloud [2025-09-08 10:34:11][357450471644282][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:34:11][357450471644282][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 28511 5021 23878036 159980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:34:11][357450471644282][303 ms][DEBUG] targetPkg: running [2025-09-08 10:34:11][357450471644282][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 10:34:11][357450471644282][303 ms][DEBUG] START check_boot_completed [2025-09-08 10:34:11][357450471644282][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:34:11][357450471644282][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:34:11][357450471644282][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:34:12][357450471644282][412 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 10:34:12][357450471644282][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 10:34:12][357450471644282][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:34:12][357450471644282][540 ms][DEBUG] SU: done in 127 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4197\nsuccessfulTxPacketsPerSecond: 0.2225861857033225\nretriedTxPackets: 938\nretriedTxPacketsPerSecond: 0.07641018315188683\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3866\nsuccessfulRxPacketsPerSecond: 0.1926865488178016\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:34:12][357450471644282][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:34:12][357450471644282][897 ms][DEBUG] SU: done in 357 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.927/228.927/228.927/0.000 ms\n [2025-09-08 10:34:12][357450471644282][897 ms][DEBUG] check_internet: online [2025-09-08 10:34:12][357450471644282][897 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:34:12][357450471644282][897 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450471644282\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8677\"}'\'' -e'"" [2025-09-08 10:34:12][357450471644282][897 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:34:12][357450471644282][897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450471644282\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8677\"}'\'' -e'"" [2025-09-08 10:34:17][357450471644282][6036 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25a0e3a0-ba10-4495-9ed8-0e9b90e125bb","id":"QR_25a0e3a0-ba10-4495-9ed8-0e9b90e125bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:34:17][357450471644282][6192 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 10:34:17][357450471644282][6192 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 10:34:17][357450471644282][6192 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:34:21][356729406082283][0 ms][INFO] === Request start === [2025-09-08 10:34:21][356729406082283][1 ms][DEBUG] START check_scloud [2025-09-08 10:34:21][356729406082283][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:34:22][356729406082283][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 28511 5021 24016412 170596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:34:22][356729406082283][302 ms][DEBUG] targetPkg: running [2025-09-08 10:34:22][356729406082283][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 10:34:22][356729406082283][302 ms][DEBUG] START check_boot_completed [2025-09-08 10:34:22][356729406082283][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:34:22][356729406082283][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:34:22][356729406082283][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:34:22][356729406082283][411 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 10:34:22][356729406082283][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 10:34:22][356729406082283][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:34:22][356729406082283][520 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4197\nsuccessfulTxPacketsPerSecond: 0.2225861857033225\nretriedTxPackets: 938\nretriedTxPacketsPerSecond: 0.07641018315188683\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3866\nsuccessfulRxPacketsPerSecond: 0.1926865488178016\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:34:22][356729406082283][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:34:22][356729406082283][880 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.320/216.320/216.320/0.000 ms\n [2025-09-08 10:34:22][356729406082283][880 ms][DEBUG] check_internet: online [2025-09-08 10:34:22][356729406082283][880 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:34:22][356729406082283][880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729406082283\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2345\"}'\'' -e'"" [2025-09-08 10:34:22][356729406082283][880 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:34:22][356729406082283][880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729406082283\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2345\"}'\'' -e'"" [2025-09-08 10:34:26][356729406082283][4285 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3361a5ee-cf6d-45d0-93dc-ad822e6cd4df","id":"QR_3361a5ee-cf6d-45d0-93dc-ad822e6cd4df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:34:26][356729406082283][4441 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-08 10:34:26][356729406082283][4441 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-09-08 10:34:26][356729406082283][4441 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:34:28][356729406082283][0 ms][INFO] === Request start === [2025-09-08 10:34:28][356729406082283][1 ms][DEBUG] START check_scloud [2025-09-08 10:34:28][356729406082283][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:34:28][356729406082283][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 28511 5021 24145664 182560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:34:28][356729406082283][253 ms][DEBUG] targetPkg: running [2025-09-08 10:34:28][356729406082283][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-08 10:34:28][356729406082283][253 ms][DEBUG] START check_boot_completed [2025-09-08 10:34:28][356729406082283][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:34:29][356729406082283][299 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:34:29][356729406082283][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:34:29][356729406082283][348 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 10:34:29][356729406082283][348 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 10:34:29][356729406082283][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:34:29][356729406082283][487 ms][DEBUG] SU: done in 138 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4197\nsuccessfulTxPacketsPerSecond: 0.2225861857033225\nretriedTxPackets: 938\nretriedTxPacketsPerSecond: 0.07641018315188683\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3866\nsuccessfulRxPacketsPerSecond: 0.1926865488178016\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:34:29][356729406082283][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:34:29][356729406082283][799 ms][DEBUG] SU: done in 313 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.582/214.582/214.582/0.000 ms\n [2025-09-08 10:34:29][356729406082283][799 ms][DEBUG] check_internet: online [2025-09-08 10:34:29][356729406082283][799 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:34:29][356729406082283][800 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729406082283\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2990\"}'\'' -e'"" [2025-09-08 10:34:29][356729406082283][800 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:34:29][356729406082283][800 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729406082283\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2990\"}'\'' -e'"" [2025-09-08 10:34:34][356729406082283][5548 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ebe9d2e3-e4d0-4484-8bec-2b99bc3af93a","id":"QR_ebe9d2e3-e4d0-4484-8bec-2b99bc3af93a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:34:34][356729406082283][5704 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-08 10:34:34][356729406082283][5704 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-08 10:34:34][356729406082283][5704 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:38:03][355245255310916][1 ms][INFO] === Request start === [2025-09-08 10:38:03][355245255310916][1 ms][DEBUG] START check_scloud [2025-09-08 10:38:03][355245255310916][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:38:03][355245255310916][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 28511 5021 24261020 194108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:38:03][355245255310916][250 ms][DEBUG] targetPkg: running [2025-09-08 10:38:03][355245255310916][250 ms][DEBUG] END check_scloud in 249 ms [2025-09-08 10:38:03][355245255310916][250 ms][DEBUG] START check_boot_completed [2025-09-08 10:38:03][355245255310916][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:38:03][355245255310916][282 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:38:03][355245255310916][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:38:03][355245255310916][329 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:38:03][355245255310916][329 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 10:38:03][355245255310916][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:38:03][355245255310916][454 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4300\nsuccessfulTxPacketsPerSecond: 0.6817534964687817\nretriedTxPackets: 970\nretriedTxPacketsPerSecond: 0.2118069115242817\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3956\nsuccessfulRxPacketsPerSecond: 0.5957069386620422\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:38:03][355245255310916][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:38:03][355245255310916][751 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.012/186.012/186.012/0.000 ms\n [2025-09-08 10:38:03][355245255310916][751 ms][DEBUG] check_internet: online [2025-09-08 10:38:03][355245255310916][751 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:38:03][355245255310916][751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355245255310916\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"HUI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5142\"}'\'' -e'"" [2025-09-08 10:38:03][355245255310916][751 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:38:03][355245255310916][751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355245255310916\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"HUI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5142\"}'\'' -e'"" [2025-09-08 10:38:08][355245255310916][5359 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e20891dd-ddb4-4f7d-9ea0-3072959cafe1","id":"QR_e20891dd-ddb4-4f7d-9ea0-3072959cafe1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:38:08][355245255310916][5515 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-08 10:38:08][355245255310916][5515 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-08 10:38:08][355245255310916][5515 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:38:11][355245255310916][0 ms][INFO] === Request start === [2025-09-08 10:38:11][355245255310916][1 ms][DEBUG] START check_scloud [2025-09-08 10:38:11][355245255310916][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:38:11][355245255310916][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 28511 5021 24405540 205916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:38:11][355245255310916][323 ms][DEBUG] targetPkg: running [2025-09-08 10:38:11][355245255310916][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-08 10:38:11][355245255310916][323 ms][DEBUG] START check_boot_completed [2025-09-08 10:38:11][355245255310916][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:38:11][355245255310916][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:38:11][355245255310916][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:38:11][355245255310916][417 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:38:11][355245255310916][417 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 10:38:11][355245255310916][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:38:11][355245255310916][557 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4300\nsuccessfulTxPacketsPerSecond: 0.6817534964687817\nretriedTxPackets: 970\nretriedTxPacketsPerSecond: 0.2118069115242817\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3956\nsuccessfulRxPacketsPerSecond: 0.5957069386620422\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:38:11][355245255310916][557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:38:11][355245255310916][869 ms][DEBUG] SU: done in 313 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.756/204.756/204.756/0.000 ms\n [2025-09-08 10:38:11][355245255310916][870 ms][DEBUG] check_internet: online [2025-09-08 10:38:11][355245255310916][870 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:38:11][355245255310916][870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355245255310916\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"HUI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2703\"}'\'' -e'"" [2025-09-08 10:38:11][355245255310916][870 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:38:11][355245255310916][870 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355245255310916\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"HUI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2703\"}'\'' -e'"" [2025-09-08 10:38:17][355245255310916][6024 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59a12cd4-4c61-49e1-8d6d-903d409b6104","id":"QR_59a12cd4-4c61-49e1-8d6d-903d409b6104","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:38:17][355245255310916][6180 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-08 10:38:17][355245255310916][6181 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 10:38:17][355245255310916][6181 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:42:03][351877472016605][1 ms][INFO] === Request start === [2025-09-08 10:42:03][351877472016605][1 ms][DEBUG] START check_scloud [2025-09-08 10:42:03][351877472016605][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:42:03][351877472016605][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 28511 5021 24523364 217348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:42:03][351877472016605][318 ms][DEBUG] targetPkg: running [2025-09-08 10:42:03][351877472016605][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 10:42:03][351877472016605][318 ms][DEBUG] START check_boot_completed [2025-09-08 10:42:03][351877472016605][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:42:03][351877472016605][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:42:03][351877472016605][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:42:04][351877472016605][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:42:04][351877472016605][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 10:42:04][351877472016605][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:42:04][351877472016605][536 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4432\nsuccessfulTxPacketsPerSecond: 0.6514593676895895\nretriedTxPackets: 1011\nretriedTxPacketsPerSecond: 0.20234722784297854\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4062\nsuccessfulRxPacketsPerSecond: 0.5231416134477006\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:42:04][351877472016605][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:42:04][351877472016605][1083 ms][DEBUG] SU: done in 546 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.741/201.741/201.741/0.000 ms\n [2025-09-08 10:42:04][351877472016605][1083 ms][DEBUG] check_internet: online [2025-09-08 10:42:04][351877472016605][1083 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:42:04][351877472016605][1083 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472016605\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2491\"}'\'' -e'"" [2025-09-08 10:42:04][351877472016605][1083 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:42:04][351877472016605][1083 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472016605\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2491\"}'\'' -e'"" [2025-09-08 10:42:08][351877472016605][4910 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66d1039c-c657-4d0d-8d71-9a6b06d193cb","id":"QR_66d1039c-c657-4d0d-8d71-9a6b06d193cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:42:08][351877472016605][5066 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-09-08 10:42:08][351877472016605][5066 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-08 10:42:08][351877472016605][5066 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:42:11][351877472016605][0 ms][INFO] === Request start === [2025-09-08 10:42:11][351877472016605][1 ms][DEBUG] START check_scloud [2025-09-08 10:42:11][351877472016605][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:42:11][351877472016605][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 28511 5021 24653676 227040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:42:11][351877472016605][280 ms][DEBUG] targetPkg: running [2025-09-08 10:42:11][351877472016605][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-08 10:42:11][351877472016605][280 ms][DEBUG] START check_boot_completed [2025-09-08 10:42:11][351877472016605][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:42:11][351877472016605][326 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:42:11][351877472016605][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:42:11][351877472016605][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:42:11][351877472016605][373 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 10:42:11][351877472016605][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:42:11][351877472016605][483 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4432\nsuccessfulTxPacketsPerSecond: 0.6514593676895895\nretriedTxPackets: 1011\nretriedTxPacketsPerSecond: 0.20234722784297854\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4062\nsuccessfulRxPacketsPerSecond: 0.5231416134477006\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:42:11][351877472016605][484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:42:11][351877472016605][811 ms][DEBUG] SU: done in 327 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.983/216.983/216.983/0.000 ms\n [2025-09-08 10:42:11][351877472016605][811 ms][DEBUG] check_internet: online [2025-09-08 10:42:11][351877472016605][811 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:42:11][351877472016605][811 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472016605\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1085\"}'\'' -e'"" [2025-09-08 10:42:11][351877472016605][811 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:42:11][351877472016605][811 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472016605\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1085\"}'\'' -e'"" [2025-09-08 10:42:16][351877472016605][5966 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9f57ba8-0790-4182-a84e-3c203829ade3","id":"QR_b9f57ba8-0790-4182-a84e-3c203829ade3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:42:17][351877472016605][6122 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 10:42:17][351877472016605][6122 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 10:42:17][351877472016605][6122 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:42:21][357866605001091][0 ms][INFO] === Request start === [2025-09-08 10:42:21][357866605001091][1 ms][DEBUG] START check_scloud [2025-09-08 10:42:21][357866605001091][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:42:21][357866605001091][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 28511 5021 24833144 237576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:42:21][357866605001091][272 ms][DEBUG] targetPkg: running [2025-09-08 10:42:21][357866605001091][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-08 10:42:21][357866605001091][272 ms][DEBUG] START check_boot_completed [2025-09-08 10:42:21][357866605001091][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:42:21][357866605001091][319 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:42:21][357866605001091][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:42:21][357866605001091][367 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 10:42:21][357866605001091][367 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 10:42:21][357866605001091][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:42:21][357866605001091][490 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4432\nsuccessfulTxPacketsPerSecond: 0.6514593676895895\nretriedTxPackets: 1011\nretriedTxPacketsPerSecond: 0.20234722784297854\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4062\nsuccessfulRxPacketsPerSecond: 0.5231416134477006\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:42:21][357866605001091][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:42:22][357866605001091][850 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=243 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 243.261/243.261/243.261/0.000 ms\n [2025-09-08 10:42:22][357866605001091][850 ms][DEBUG] check_internet: online [2025-09-08 10:42:22][357866605001091][850 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:42:22][357866605001091][850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866605001091\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9584\"}'\'' -e'"" [2025-09-08 10:42:22][357866605001091][850 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:42:22][357866605001091][850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866605001091\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9584\"}'\'' -e'"" [2025-09-08 10:42:26][357866605001091][4662 ms][DEBUG] proc_open done in 3811 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 10:42:26][357866605001091][4662 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-09-08 10:42:26][357866605001091][4662 ms][WARN] Detected error: Process with pid 28511 either refused to load frida-agent, or terminated during injectionProcess with pid 28511 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 10:42:26][357866605001091][4662 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 10:42:26][357866605001091][4943 ms][DEBUG] SU: done in 281 ms; outsystem 5440 5021 12553968 185524 ep_poll 0 S system_server\n [2025-09-08 10:42:26][357866605001091][4943 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 10:42:26][357866605001091][5083 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 10:42:26][357866605001091][5084 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 10:42:26][357866605001091][5084 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 10:42:26][357866605001091][5224 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 10:42:26][357866605001091][5224 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 10:42:26][357866605001091][5380 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 10:42:28][357866605001091][7395 ms][DEBUG] START check_boot_completed [2025-09-08 10:42:28][357866605001091][7395 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:42:28][357866605001091][7442 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:42:28][357866605001091][7442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:42:28][357866605001091][7491 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 10:42:28][357866605001091][7491 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-08 10:42:31][357866605001091][10504 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 10:42:31][357866605001091][10504 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866605001091\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9584\"}'\'' -e'"" [2025-09-08 10:42:35][357866605001091][13940 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_beac1a55-216e-4002-b176-fcebddf92a20","id":"QR_beac1a55-216e-4002-b176-fcebddf92a20","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:42:35][357866605001091][14097 ms][DEBUG] proc_open done in 3593 ms; code=255; res.len=3343 [2025-09-08 10:42:35][357866605001091][14097 ms][DEBUG] END runCmdUntilRes#2 in 3593 ms [2025-09-08 10:42:35][357866605001091][14097 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:42:37][357866605001091][0 ms][INFO] === Request start === [2025-09-08 10:42:37][357866605001091][1 ms][DEBUG] START check_scloud [2025-09-08 10:42:37][357866605001091][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:42:38][357866605001091][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 30477 5021 23587392 124460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:42:38][357866605001091][258 ms][DEBUG] targetPkg: running [2025-09-08 10:42:38][357866605001091][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-08 10:42:38][357866605001091][258 ms][DEBUG] START check_boot_completed [2025-09-08 10:42:38][357866605001091][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:42:38][357866605001091][304 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:42:38][357866605001091][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:42:38][357866605001091][352 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 10:42:38][357866605001091][353 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 10:42:38][357866605001091][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:42:38][357866605001091][461 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4432\nsuccessfulTxPacketsPerSecond: 0.6514593676895895\nretriedTxPackets: 1011\nretriedTxPacketsPerSecond: 0.20234722784297854\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4062\nsuccessfulRxPacketsPerSecond: 0.5231416134477006\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:42:38][357866605001091][461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:42:38][357866605001091][726 ms][DEBUG] SU: done in 265 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.997/163.997/163.997/0.000 ms\n [2025-09-08 10:42:38][357866605001091][726 ms][DEBUG] check_internet: online [2025-09-08 10:42:38][357866605001091][726 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:42:38][357866605001091][726 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866605001091\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6869\"}'\'' -e'"" [2025-09-08 10:42:38][357866605001091][726 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:42:38][357866605001091][726 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866605001091\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6869\"}'\'' -e'"" [2025-09-08 10:42:43][357866605001091][5490 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66d8afd4-1a0f-46e8-9480-eb36e1a87e4d","id":"QR_66d8afd4-1a0f-46e8-9480-eb36e1a87e4d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:42:43][357866605001091][5647 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-09-08 10:42:43][357866605001091][5647 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-08 10:42:43][357866605001091][5647 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:47:03][351272333378875][1 ms][INFO] === Request start === [2025-09-08 10:47:03][351272333378875][1 ms][DEBUG] START check_scloud [2025-09-08 10:47:03][351272333378875][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:47:03][351272333378875][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 30477 5021 23661900 137760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:47:03][351272333378875][266 ms][DEBUG] targetPkg: running [2025-09-08 10:47:03][351272333378875][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-08 10:47:03][351272333378875][266 ms][DEBUG] START check_boot_completed [2025-09-08 10:47:03][351272333378875][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:47:03][351272333378875][297 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:47:03][351272333378875][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:47:03][351272333378875][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:47:03][351272333378875][344 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 10:47:03][351272333378875][344 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:47:03][351272333378875][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333378875\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1142\"}'\'' -e'"" [2025-09-08 10:47:03][351272333378875][344 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:47:03][351272333378875][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333378875\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1142\"}'\'' -e'"" [2025-09-08 10:47:08][351272333378875][4968 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1640e1bc-43f8-4030-b904-66a7565f4d41","id":"QR_1640e1bc-43f8-4030-b904-66a7565f4d41","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:47:08][351272333378875][5124 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-09-08 10:47:08][351272333378875][5124 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-08 10:47:08][351272333378875][5124 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:47:10][351272333378875][0 ms][INFO] === Request start === [2025-09-08 10:47:10][351272333378875][1 ms][DEBUG] START check_scloud [2025-09-08 10:47:10][351272333378875][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:47:11][351272333378875][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 30477 5021 23841364 149848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:47:11][351272333378875][314 ms][DEBUG] targetPkg: running [2025-09-08 10:47:11][351272333378875][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 10:47:11][351272333378875][314 ms][DEBUG] START check_boot_completed [2025-09-08 10:47:11][351272333378875][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:47:11][351272333378875][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:47:11][351272333378875][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:47:11][351272333378875][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 10:47:11][351272333378875][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 10:47:11][351272333378875][423 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:47:11][351272333378875][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333378875\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5110\"}'\'' -e'"" [2025-09-08 10:47:11][351272333378875][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:47:11][351272333378875][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333378875\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5110\"}'\'' -e'"" [2025-09-08 10:47:16][351272333378875][5687 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_497865ca-a135-4fbd-a1ce-d2c4f66767f0","id":"QR_497865ca-a135-4fbd-a1ce-d2c4f66767f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:47:16][351272333378875][5843 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-08 10:47:16][351272333378875][5843 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-08 10:47:16][351272333378875][5843 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:48:04][350249602244419][0 ms][INFO] === Request start === [2025-09-08 10:48:04][350249602244419][0 ms][DEBUG] START check_scloud [2025-09-08 10:48:04][350249602244419][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:48:04][350249602244419][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 30477 5021 23987860 160748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:48:04][350249602244419][304 ms][DEBUG] targetPkg: running [2025-09-08 10:48:04][350249602244419][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 10:48:04][350249602244419][305 ms][DEBUG] START check_boot_completed [2025-09-08 10:48:04][350249602244419][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:48:04][350249602244419][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:48:04][350249602244419][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:48:04][350249602244419][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:48:04][350249602244419][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 10:48:04][350249602244419][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:48:04][350249602244419][507 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4567\nsuccessfulTxPacketsPerSecond: 0.4374906830687865\nretriedTxPackets: 1056\nretriedTxPacketsPerSecond: 0.1458302276895955\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4185\nsuccessfulRxPacketsPerSecond: 0.398602622351561\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:48:04][350249602244419][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:48:06][350249602244419][2007 ms][DEBUG] SU: done in 1500 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.654/201.654/201.654/0.000 ms\n [2025-09-08 10:48:06][350249602244419][2007 ms][DEBUG] check_internet: online [2025-09-08 10:48:06][350249602244419][2007 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:48:06][350249602244419][2007 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350249602244419\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8468\"}'\'' -e'"" [2025-09-08 10:48:06][350249602244419][2007 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:48:06][350249602244419][2007 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350249602244419\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8468\"}'\'' -e'"" [2025-09-08 10:48:09][350249602244419][5225 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 10:48:09][350249602244419][5381 ms][DEBUG] proc_open done in 3373 ms; code=255; res.len=107 [2025-09-08 10:48:09][350249602244419][5381 ms][DEBUG] END runCmdUntilRes#1 in 3374 ms [2025-09-08 10:48:09][350249602244419][5381 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 10:48:10][][0 ms][INFO] === Request start === [2025-09-08 10:48:10][][1 ms][DEBUG] START check_scloud [2025-09-08 10:48:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:48:10][][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 30477 5021 24144732 171540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:48:10][][319 ms][DEBUG] targetPkg: running [2025-09-08 10:48:10][][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 10:48:10][][319 ms][DEBUG] START check_boot_completed [2025-09-08 10:48:10][][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:48:10][][350 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:48:10][][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:48:10][][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:48:10][][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 10:48:10][][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:48:10][][522 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4567\nsuccessfulTxPacketsPerSecond: 0.4374906830687865\nretriedTxPackets: 1056\nretriedTxPacketsPerSecond: 0.1458302276895955\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4185\nsuccessfulRxPacketsPerSecond: 0.398602622351561\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:48:10][][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:48:10][][772 ms][DEBUG] SU: done in 250 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=157 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 157.412/157.412/157.412/0.000 ms\n [2025-09-08 10:48:10][][772 ms][DEBUG] check_internet: online [2025-09-08 10:48:10][][772 ms][DEBUG] rawBody.length=1131 [2025-09-08 10:48:10][][772 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXB06LBRE\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6261\"}'\'' -e'"" [2025-09-08 10:48:10][][772 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:48:10][][772 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXB06LBRE\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6261\"}'\'' -e'"" [2025-09-08 10:48:14][][4474 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 10:48:14][][4630 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=107 [2025-09-08 10:48:14][][4631 ms][DEBUG] END runCmdUntilRes#1 in 3859 ms [2025-09-08 10:48:14][][4631 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 10:48:16][350249602244419][0 ms][INFO] === Request start === [2025-09-08 10:48:16][350249602244419][1 ms][DEBUG] START check_scloud [2025-09-08 10:48:16][350249602244419][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:48:16][350249602244419][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 30477 5021 24330340 183532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:48:16][350249602244419][292 ms][DEBUG] targetPkg: running [2025-09-08 10:48:16][350249602244419][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-08 10:48:16][350249602244419][292 ms][DEBUG] START check_boot_completed [2025-09-08 10:48:16][350249602244419][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:48:16][350249602244419][338 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:48:16][350249602244419][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:48:16][350249602244419][386 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 10:48:16][350249602244419][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 10:48:16][350249602244419][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 10:48:17][350249602244419][526 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4567\nsuccessfulTxPacketsPerSecond: 0.4374906830687865\nretriedTxPackets: 1056\nretriedTxPacketsPerSecond: 0.1458302276895955\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4185\nsuccessfulRxPacketsPerSecond: 0.398602622351561\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 10:48:17][350249602244419][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 10:48:17][350249602244419][932 ms][DEBUG] SU: done in 406 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=286 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 286.518/286.518/286.518/0.000 ms\n [2025-09-08 10:48:17][350249602244419][932 ms][DEBUG] check_internet: online [2025-09-08 10:48:17][350249602244419][932 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:48:17][350249602244419][932 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350249602244419\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8801\"}'\'' -e'"" [2025-09-08 10:48:17][350249602244419][932 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:48:17][350249602244419][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350249602244419\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8801\"}'\'' -e'"" [2025-09-08 10:48:22][350249602244419][6087 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc41bb2b-37af-4168-9c2a-f5e6507f53d9","id":"QR_cc41bb2b-37af-4168-9c2a-f5e6507f53d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:48:22][350249602244419][6243 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 10:48:22][350249602244419][6244 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 10:48:22][350249602244419][6244 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:51:03][355221174262967][1 ms][INFO] === Request start === [2025-09-08 10:51:03][355221174262967][1 ms][DEBUG] START check_scloud [2025-09-08 10:51:03][355221174262967][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:51:03][355221174262967][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 30477 5021 24427776 194964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:51:03][355221174262967][265 ms][DEBUG] targetPkg: running [2025-09-08 10:51:03][355221174262967][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-08 10:51:03][355221174262967][265 ms][DEBUG] START check_boot_completed [2025-09-08 10:51:03][355221174262967][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:51:03][355221174262967][296 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:51:03][355221174262967][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:51:03][355221174262967][344 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 10:51:03][355221174262967][344 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 10:51:03][355221174262967][344 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:51:03][355221174262967][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355221174262967\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9920\"}'\'' -e'"" [2025-09-08 10:51:03][355221174262967][344 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:51:03][355221174262967][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355221174262967\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9920\"}'\'' -e'"" [2025-09-08 10:51:08][355221174262967][4904 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a52a30d-3652-499a-b8fc-cd9c49f10a1b","id":"QR_0a52a30d-3652-499a-b8fc-cd9c49f10a1b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:51:08][355221174262967][5060 ms][DEBUG] proc_open done in 4716 ms; code=255; res.len=3343 [2025-09-08 10:51:08][355221174262967][5060 ms][DEBUG] END runCmdUntilRes#1 in 4716 ms [2025-09-08 10:51:08][355221174262967][5061 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:51:10][355221174262967][0 ms][INFO] === Request start === [2025-09-08 10:51:10][355221174262967][1 ms][DEBUG] START check_scloud [2025-09-08 10:51:10][355221174262967][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:51:11][355221174262967][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 30477 5021 24609160 206744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:51:11][355221174262967][324 ms][DEBUG] targetPkg: running [2025-09-08 10:51:11][355221174262967][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-08 10:51:11][355221174262967][324 ms][DEBUG] START check_boot_completed [2025-09-08 10:51:11][355221174262967][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:51:11][355221174262967][371 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:51:11][355221174262967][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:51:11][355221174262967][433 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 10:51:11][355221174262967][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 10:51:11][355221174262967][433 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:51:11][355221174262967][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355221174262967\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DKR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3756\"}'\'' -e'"" [2025-09-08 10:51:11][355221174262967][433 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:51:11][355221174262967][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355221174262967\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DKR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3756\"}'\'' -e'"" [2025-09-08 10:51:16][355221174262967][5432 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40dfd0dd-e278-4088-ae5b-7093d37fa6e2","id":"QR_40dfd0dd-e278-4088-ae5b-7093d37fa6e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:51:16][355221174262967][5588 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-09-08 10:51:16][355221174262967][5588 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-08 10:51:16][355221174262967][5588 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:51:20][351877472959929][0 ms][INFO] === Request start === [2025-09-08 10:51:20][351877472959929][1 ms][DEBUG] START check_scloud [2025-09-08 10:51:20][351877472959929][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:51:20][351877472959929][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 30477 5021 24749584 218500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:51:20][351877472959929][315 ms][DEBUG] targetPkg: running [2025-09-08 10:51:20][351877472959929][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 10:51:20][351877472959929][315 ms][DEBUG] START check_boot_completed [2025-09-08 10:51:20][351877472959929][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:51:20][351877472959929][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:51:20][351877472959929][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:51:20][351877472959929][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:51:20][351877472959929][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 10:51:20][351877472959929][409 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:51:20][351877472959929][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472959929\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5699\"}'\'' -e'"" [2025-09-08 10:51:20][351877472959929][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:51:20][351877472959929][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472959929\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5699\"}'\'' -e'"" [2025-09-08 10:51:24][351877472959929][3673 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c6e3fe08-6361-44b0-9e26-bc04200a13e1","id":"QR_c6e3fe08-6361-44b0-9e26-bc04200a13e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:51:24][351877472959929][3830 ms][DEBUG] proc_open done in 3420 ms; code=255; res.len=3343 [2025-09-08 10:51:24][351877472959929][3830 ms][DEBUG] END runCmdUntilRes#1 in 3420 ms [2025-09-08 10:51:24][351877472959929][3830 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:51:26][351877472959929][0 ms][INFO] === Request start === [2025-09-08 10:51:26][351877472959929][1 ms][DEBUG] START check_scloud [2025-09-08 10:51:26][351877472959929][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:51:26][351877472959929][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 30477 5021 24863476 230500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:51:26][351877472959929][269 ms][DEBUG] targetPkg: running [2025-09-08 10:51:26][351877472959929][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-08 10:51:26][351877472959929][269 ms][DEBUG] START check_boot_completed [2025-09-08 10:51:26][351877472959929][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:51:26][351877472959929][316 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:51:26][351877472959929][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:51:26][351877472959929][378 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 10:51:26][351877472959929][378 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 10:51:26][351877472959929][378 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:51:26][351877472959929][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472959929\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4868\"}'\'' -e'"" [2025-09-08 10:51:26][351877472959929][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:51:26][351877472959929][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472959929\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4868\"}'\'' -e'"" [2025-09-08 10:51:31][351877472959929][5189 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_62e3119d-b938-4bf3-82f2-3f60c2102690","id":"QR_62e3119d-b938-4bf3-82f2-3f60c2102690","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:51:31][351877472959929][5346 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-08 10:51:31][351877472959929][5346 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-09-08 10:51:31][351877472959929][5346 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:55:04][356412382850433][1 ms][INFO] === Request start === [2025-09-08 10:55:04][356412382850433][1 ms][DEBUG] START check_scloud [2025-09-08 10:55:04][356412382850433][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:55:04][356412382850433][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 30477 5021 24937480 243100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:55:04][356412382850433][319 ms][DEBUG] targetPkg: running [2025-09-08 10:55:04][356412382850433][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 10:55:04][356412382850433][319 ms][DEBUG] START check_boot_completed [2025-09-08 10:55:04][356412382850433][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:55:04][356412382850433][350 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 10:55:04][356412382850433][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:55:04][356412382850433][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 10:55:04][356412382850433][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 10:55:04][356412382850433][397 ms][DEBUG] rawBody.length=1150 [2025-09-08 10:55:04][356412382850433][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356412382850433\",\"model\":\"SM-E146B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4916\"}'\'' -e'"" [2025-09-08 10:55:04][356412382850433][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:55:04][356412382850433][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356412382850433\",\"model\":\"SM-E146B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4916\"}'\'' -e'"" [2025-09-08 10:55:08][356412382850433][4068 ms][DEBUG] proc_open done in 3671 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 10:55:08][356412382850433][4068 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-08 10:55:08][356412382850433][4068 ms][WARN] Detected error: Process with pid 30477 either refused to load frida-agent, or terminated during injectionProcess with pid 30477 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 10:55:08][356412382850433][4068 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 10:55:08][356412382850433][4319 ms][DEBUG] SU: done in 251 ms; outsystem 5440 5021 12555568 184196 ep_poll 0 S system_server\n [2025-09-08 10:55:08][356412382850433][4319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 10:55:08][356412382850433][4458 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 10:55:08][356412382850433][4459 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 10:55:08][356412382850433][4459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 10:55:08][356412382850433][4615 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 10:55:08][356412382850433][4615 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 10:55:08][356412382850433][4802 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 10:55:10][356412382850433][6817 ms][DEBUG] START check_boot_completed [2025-09-08 10:55:10][356412382850433][6817 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:55:10][356412382850433][6864 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 10:55:10][356412382850433][6864 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:55:10][356412382850433][6912 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 10:55:10][356412382850433][6912 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 10:55:13][356412382850433][9926 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 10:55:13][356412382850433][9926 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356412382850433\",\"model\":\"SM-E146B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4916\"}'\'' -e'"" [2025-09-08 10:55:17][356412382850433][13816 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5011cf1f-3d71-4075-aad7-a3d48e0bd362","id":"QR_5011cf1f-3d71-4075-aad7-a3d48e0bd362","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:55:17][356412382850433][13972 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-09-08 10:55:17][356412382850433][13972 ms][DEBUG] END runCmdUntilRes#2 in 4046 ms [2025-09-08 10:55:17][356412382850433][13972 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 10:55:20][356412382850433][0 ms][INFO] === Request start === [2025-09-08 10:55:20][356412382850433][1 ms][DEBUG] START check_scloud [2025-09-08 10:55:20][356412382850433][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 10:55:20][356412382850433][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 32170 5021 23578652 123744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 10:55:20][356412382850433][250 ms][DEBUG] targetPkg: running [2025-09-08 10:55:20][356412382850433][250 ms][DEBUG] END check_scloud in 249 ms [2025-09-08 10:55:20][356412382850433][250 ms][DEBUG] START check_boot_completed [2025-09-08 10:55:20][356412382850433][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 10:55:20][356412382850433][297 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 10:55:20][356412382850433][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 10:55:20][356412382850433][359 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 10:55:20][356412382850433][359 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 10:55:20][356412382850433][359 ms][DEBUG] rawBody.length=1160 [2025-09-08 10:55:20][356412382850433][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356412382850433\",\"model\":\"SM-E146B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8549\"}'\'' -e'"" [2025-09-08 10:55:20][356412382850433][359 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 10:55:20][356412382850433][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356412382850433\",\"model\":\"SM-E146B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8549\"}'\'' -e'"" [2025-09-08 10:55:25][356412382850433][5311 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a4d915e-fe58-4c12-9cea-28e5291186ea","id":"QR_4a4d915e-fe58-4c12-9cea-28e5291186ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 10:55:25][356412382850433][5467 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-08 10:55:25][356412382850433][5467 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-08 10:55:25][356412382850433][5467 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:02:03][352469859443542][1 ms][INFO] === Request start === [2025-09-08 11:02:03][352469859443542][1 ms][DEBUG] START check_scloud [2025-09-08 11:02:03][352469859443542][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:02:04][352469859443542][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 32170 5021 23606080 138024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:02:04][352469859443542][264 ms][DEBUG] targetPkg: running [2025-09-08 11:02:04][352469859443542][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-08 11:02:04][352469859443542][264 ms][DEBUG] START check_boot_completed [2025-09-08 11:02:04][352469859443542][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:02:04][352469859443542][295 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:02:04][352469859443542][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:02:04][352469859443542][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:02:04][352469859443542][342 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:02:04][352469859443542][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:02:04][352469859443542][451 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4985\nsuccessfulTxPacketsPerSecond: 0.5781510858197078\nretriedTxPackets: 1163\nretriedTxPacketsPerSecond: 0.10068923404725248\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4532\nsuccessfulRxPacketsPerSecond: 0.487205971196383\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:02:04][352469859443542][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:02:06][352469859443542][2154 ms][DEBUG] SU: done in 1703 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.154/198.154/198.154/0.000 ms\n [2025-09-08 11:02:06][352469859443542][2154 ms][DEBUG] check_internet: online [2025-09-08 11:02:06][352469859443542][2155 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:02:06][352469859443542][2155 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859443542\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4267\"}'\'' -e'"" [2025-09-08 11:02:06][352469859443542][2155 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:02:06][352469859443542][2155 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859443542\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4267\"}'\'' -e'"" [2025-09-08 11:02:09][352469859443542][5950 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_052c02cf-21e6-4e69-8678-85bcf48e7aed","id":"QR_052c02cf-21e6-4e69-8678-85bcf48e7aed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:02:10][352469859443542][6106 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-09-08 11:02:10][352469859443542][6107 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-08 11:02:10][352469859443542][6107 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:02:12][352469859443542][0 ms][INFO] === Request start === [2025-09-08 11:02:12][352469859443542][1 ms][DEBUG] START check_scloud [2025-09-08 11:02:12][352469859443542][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:02:12][352469859443542][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 32170 5021 23778324 149612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:02:12][352469859443542][275 ms][DEBUG] targetPkg: running [2025-09-08 11:02:12][352469859443542][275 ms][DEBUG] END check_scloud in 275 ms [2025-09-08 11:02:12][352469859443542][276 ms][DEBUG] START check_boot_completed [2025-09-08 11:02:12][352469859443542][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:02:12][352469859443542][322 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:02:12][352469859443542][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:02:12][352469859443542][385 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:02:12][352469859443542][385 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 11:02:12][352469859443542][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:02:12][352469859443542][510 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4985\nsuccessfulTxPacketsPerSecond: 0.5781510858197078\nretriedTxPackets: 1163\nretriedTxPacketsPerSecond: 0.10068923404725248\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4532\nsuccessfulRxPacketsPerSecond: 0.487205971196383\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:02:12][352469859443542][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:02:13][352469859443542][838 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.361/184.361/184.361/0.000 ms\n [2025-09-08 11:02:13][352469859443542][838 ms][DEBUG] check_internet: online [2025-09-08 11:02:13][352469859443542][838 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:02:13][352469859443542][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859443542\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5304\"}'\'' -e'"" [2025-09-08 11:02:13][352469859443542][838 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:02:13][352469859443542][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859443542\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5304\"}'\'' -e'"" [2025-09-08 11:02:18][352469859443542][6196 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d037439e-62de-42d2-9464-3ca6241156d5","id":"QR_d037439e-62de-42d2-9464-3ca6241156d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:02:18][352469859443542][6352 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-09-08 11:02:18][352469859443542][6352 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-08 11:02:18][352469859443542][6352 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:03:03][357712351415376][0 ms][INFO] === Request start === [2025-09-08 11:03:03][357712351415376][1 ms][DEBUG] START check_scloud [2025-09-08 11:03:03][357712351415376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:03:03][357712351415376][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 32170 5021 23917652 160508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:03:03][357712351415376][321 ms][DEBUG] targetPkg: running [2025-09-08 11:03:03][357712351415376][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-08 11:03:03][357712351415376][321 ms][DEBUG] START check_boot_completed [2025-09-08 11:03:03][357712351415376][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:03:03][357712351415376][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:03:03][357712351415376][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:03:03][357712351415376][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:03:03][357712351415376][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 11:03:03][357712351415376][414 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:03:03][357712351415376][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351415376\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5920\"}'\'' -e'"" [2025-09-08 11:03:03][357712351415376][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:03:03][357712351415376][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351415376\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5920\"}'\'' -e'"" [2025-09-08 11:03:06][357712351415376][3851 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c750d615-ab64-4cff-927d-d80a4eca8a14","id":"QR_c750d615-ab64-4cff-927d-d80a4eca8a14","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:03:07][357712351415376][4007 ms][DEBUG] proc_open done in 3593 ms; code=255; res.len=3343 [2025-09-08 11:03:07][357712351415376][4007 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-09-08 11:03:07][357712351415376][4007 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:03:09][357712351415376][0 ms][INFO] === Request start === [2025-09-08 11:03:09][357712351415376][1 ms][DEBUG] START check_scloud [2025-09-08 11:03:09][357712351415376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:03:09][357712351415376][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 32170 5021 24049884 171220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:03:09][357712351415376][309 ms][DEBUG] targetPkg: running [2025-09-08 11:03:09][357712351415376][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 11:03:09][357712351415376][309 ms][DEBUG] START check_boot_completed [2025-09-08 11:03:09][357712351415376][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:03:09][357712351415376][354 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 11:03:09][357712351415376][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:03:09][357712351415376][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:03:09][357712351415376][401 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 11:03:09][357712351415376][401 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:03:09][357712351415376][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351415376\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5960\"}'\'' -e'"" [2025-09-08 11:03:09][357712351415376][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:03:09][357712351415376][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351415376\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5960\"}'\'' -e'"" [2025-09-08 11:03:14][357712351415376][5087 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae8dd3cc-7e9c-4ccb-90f2-1ab61708193b","id":"QR_ae8dd3cc-7e9c-4ccb-90f2-1ab61708193b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:03:14][357712351415376][5243 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-08 11:03:14][357712351415376][5243 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-08 11:03:14][357712351415376][5243 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:07:04][351044514189714][1 ms][INFO] === Request start === [2025-09-08 11:07:04][351044514189714][1 ms][DEBUG] START check_scloud [2025-09-08 11:07:04][351044514189714][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:07:04][351044514189714][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 32170 5021 24184092 183188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:07:04][351044514189714][315 ms][DEBUG] targetPkg: running [2025-09-08 11:07:04][351044514189714][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 11:07:04][351044514189714][315 ms][DEBUG] START check_boot_completed [2025-09-08 11:07:04][351044514189714][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:07:04][351044514189714][346 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:07:04][351044514189714][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:07:04][351044514189714][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:07:04][351044514189714][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:07:04][351044514189714][393 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:07:04][351044514189714][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044514189714\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2139\"}'\'' -e'"" [2025-09-08 11:07:04][351044514189714][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:07:04][351044514189714][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044514189714\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2139\"}'\'' -e'"" [2025-09-08 11:07:08][351044514189714][4908 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31b4a9a9-b140-4174-b986-d99dd1e5af7a","id":"QR_31b4a9a9-b140-4174-b986-d99dd1e5af7a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:07:09][351044514189714][5064 ms][DEBUG] proc_open done in 4671 ms; code=255; res.len=3343 [2025-09-08 11:07:09][351044514189714][5064 ms][DEBUG] END runCmdUntilRes#1 in 4671 ms [2025-09-08 11:07:09][351044514189714][5064 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:07:11][351044514189714][0 ms][INFO] === Request start === [2025-09-08 11:07:11][351044514189714][1 ms][DEBUG] START check_scloud [2025-09-08 11:07:11][351044514189714][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:07:11][351044514189714][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 32170 5021 24357348 193996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:07:11][351044514189714][271 ms][DEBUG] targetPkg: running [2025-09-08 11:07:11][351044514189714][271 ms][DEBUG] END check_scloud in 270 ms [2025-09-08 11:07:11][351044514189714][271 ms][DEBUG] START check_boot_completed [2025-09-08 11:07:11][351044514189714][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:07:11][351044514189714][318 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:07:11][351044514189714][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:07:11][351044514189714][380 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:07:11][351044514189714][380 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 11:07:11][351044514189714][380 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:07:11][351044514189714][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044514189714\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6591\"}'\'' -e'"" [2025-09-08 11:07:11][351044514189714][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:07:11][351044514189714][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044514189714\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6591\"}'\'' -e'"" [2025-09-08 11:07:17][351044514189714][5722 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_621ce05b-820c-4e9c-8a80-f9b0e54baec6","id":"QR_621ce05b-820c-4e9c-8a80-f9b0e54baec6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:07:17][351044514189714][5879 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-09-08 11:07:17][351044514189714][5879 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-09-08 11:07:17][351044514189714][5879 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:08:03][350814494457773][0 ms][INFO] === Request start === [2025-09-08 11:08:03][350814494457773][1 ms][DEBUG] START check_scloud [2025-09-08 11:08:03][350814494457773][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:08:04][350814494457773][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 32170 5021 24452644 205964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:08:04][350814494457773][316 ms][DEBUG] targetPkg: running [2025-09-08 11:08:04][350814494457773][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 11:08:04][350814494457773][316 ms][DEBUG] START check_boot_completed [2025-09-08 11:08:04][350814494457773][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:08:04][350814494457773][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:08:04][350814494457773][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:08:04][350814494457773][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:08:04][350814494457773][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:08:04][350814494457773][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:08:04][350814494457773][488 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5092\nsuccessfulTxPacketsPerSecond: 0.35566842395676135\nretriedTxPackets: 1197\nretriedTxPacketsPerSecond: 0.11301613471523259\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4624\nsuccessfulRxPacketsPerSecond: 0.3058083645235705\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:08:04][350814494457773][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:08:05][350814494457773][1785 ms][DEBUG] SU: done in 1297 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.667/199.667/199.667/0.000 ms\n [2025-09-08 11:08:05][350814494457773][1785 ms][DEBUG] check_internet: online [2025-09-08 11:08:05][350814494457773][1785 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:08:05][350814494457773][1785 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814494457773\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3103\"}'\'' -e'"" [2025-09-08 11:08:05][350814494457773][1785 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:08:05][350814494457773][1785 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814494457773\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3103\"}'\'' -e'"" [2025-09-08 11:08:09][350814494457773][5331 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58177411-d435-446a-8568-3e1d65ef3849","id":"QR_58177411-d435-446a-8568-3e1d65ef3849","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:08:09][350814494457773][5487 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-08 11:08:09][350814494457773][5487 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-08 11:08:09][350814494457773][5487 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:08:11][350814494457773][0 ms][INFO] === Request start === [2025-09-08 11:08:11][350814494457773][1 ms][DEBUG] START check_scloud [2025-09-08 11:08:11][350814494457773][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:08:12][350814494457773][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 32170 5021 24613676 216640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:08:12][350814494457773][312 ms][DEBUG] targetPkg: running [2025-09-08 11:08:12][350814494457773][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 11:08:12][350814494457773][312 ms][DEBUG] START check_boot_completed [2025-09-08 11:08:12][350814494457773][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:08:12][350814494457773][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:08:12][350814494457773][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:08:12][350814494457773][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:08:12][350814494457773][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 11:08:12][350814494457773][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:08:12][350814494457773][530 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5092\nsuccessfulTxPacketsPerSecond: 0.35566842395676135\nretriedTxPackets: 1197\nretriedTxPacketsPerSecond: 0.11301613471523259\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4624\nsuccessfulRxPacketsPerSecond: 0.3058083645235705\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:08:12][350814494457773][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:08:12][350814494457773][858 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.637/227.637/227.637/0.000 ms\n [2025-09-08 11:08:12][350814494457773][858 ms][DEBUG] check_internet: online [2025-09-08 11:08:12][350814494457773][858 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:08:12][350814494457773][858 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814494457773\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3281\"}'\'' -e'"" [2025-09-08 11:08:12][350814494457773][858 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:08:12][350814494457773][858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814494457773\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3281\"}'\'' -e'"" [2025-09-08 11:08:17][350814494457773][6013 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9fc2fbb0-2e44-4dd0-9da8-be0fb017279a","id":"QR_9fc2fbb0-2e44-4dd0-9da8-be0fb017279a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:08:17][350814494457773][6169 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 11:08:17][350814494457773][6169 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 11:08:17][350814494457773][6169 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:08:23][355819213803251][0 ms][INFO] === Request start === [2025-09-08 11:08:23][355819213803251][1 ms][DEBUG] START check_scloud [2025-09-08 11:08:23][355819213803251][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:08:23][355819213803251][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 32170 5021 24782900 228716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:08:23][355819213803251][314 ms][DEBUG] targetPkg: running [2025-09-08 11:08:23][355819213803251][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 11:08:23][355819213803251][315 ms][DEBUG] START check_boot_completed [2025-09-08 11:08:23][355819213803251][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:08:23][355819213803251][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:08:23][355819213803251][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:08:23][355819213803251][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:08:23][355819213803251][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 11:08:23][355819213803251][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:08:23][355819213803251][502 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5092\nsuccessfulTxPacketsPerSecond: 0.35566842395676135\nretriedTxPackets: 1197\nretriedTxPacketsPerSecond: 0.11301613471523259\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4624\nsuccessfulRxPacketsPerSecond: 0.3058083645235705\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:08:23][355819213803251][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:08:24][355819213803251][814 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.923/222.923/222.923/0.000 ms\n [2025-09-08 11:08:24][355819213803251][814 ms][DEBUG] check_internet: online [2025-09-08 11:08:24][355819213803251][814 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:08:24][355819213803251][814 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355819213803251\",\"model\":\"SM-X510\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52XA0L3SSP\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7288\"}'\'' -e'"" [2025-09-08 11:08:24][355819213803251][814 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:08:24][355819213803251][815 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355819213803251\",\"model\":\"SM-X510\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52XA0L3SSP\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7288\"}'\'' -e'"" [2025-09-08 11:08:28][355819213803251][4750 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_373607de-4840-4bd8-ab23-3ebc62a6f660","id":"QR_373607de-4840-4bd8-ab23-3ebc62a6f660","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:08:28][355819213803251][4907 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-09-08 11:08:28][355819213803251][4907 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-09-08 11:08:28][355819213803251][4907 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:10:03][351240641364127][1 ms][INFO] === Request start === [2025-09-08 11:10:03][351240641364127][1 ms][DEBUG] START check_scloud [2025-09-08 11:10:03][351240641364127][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:10:03][351240641364127][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 32170 5021 24857296 240136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:10:03][351240641364127][320 ms][DEBUG] targetPkg: running [2025-09-08 11:10:03][351240641364127][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 11:10:03][351240641364127][320 ms][DEBUG] START check_boot_completed [2025-09-08 11:10:03][351240641364127][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:10:03][351240641364127][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:10:03][351240641364127][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:10:03][351240641364127][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:10:03][351240641364127][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:10:03][351240641364127][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:10:04][351240641364127][507 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30424 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5249\nsuccessfulTxPacketsPerSecond: 0.5462541577943858\nretriedTxPackets: 1247\nretriedTxPacketsPerSecond: 0.17396629229120567\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4759\nsuccessfulRxPacketsPerSecond: 0.46970898918625525\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:10:04][351240641364127][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:10:04][351240641364127][866 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.151/237.151/237.151/0.000 ms\n [2025-09-08 11:10:04][351240641364127][866 ms][DEBUG] check_internet: online [2025-09-08 11:10:04][351240641364127][866 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:10:04][351240641364127][866 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641364127\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6080\"}'\'' -e'"" [2025-09-08 11:10:04][351240641364127][866 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:10:04][351240641364127][866 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641364127\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6080\"}'\'' -e'"" [2025-09-08 11:10:12][351240641364127][8661 ms][DEBUG] proc_open done in 7795 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 11:10:12][351240641364127][8661 ms][DEBUG] END runCmdUntilRes#1 in 7795 ms [2025-09-08 11:10:12][351240641364127][8661 ms][WARN] Detected error: Process with pid 32170 either refused to load frida-agent, or terminated during injectionProcess with pid 32170 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 11:10:12][351240641364127][8661 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 11:10:12][351240641364127][9052 ms][DEBUG] SU: done in 390 ms; out [2025-09-08 11:10:12][351240641364127][9052 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 11:10:12][351240641364127][9411 ms][DEBUG] SU: done in 359 ms; out [2025-09-08 11:10:12][351240641364127][9411 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 11:10:12][351240641364127][9411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 11:10:13][351240641364127][9631 ms][DEBUG] SU: done in 219 ms; out [2025-09-08 11:10:13][351240641364127][9631 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 11:10:13][351240641364127][9880 ms][DEBUG] SU: done in 249 ms; out [2025-09-08 11:10:15][351240641364127][11895 ms][DEBUG] START check_boot_completed [2025-09-08 11:10:15][351240641364127][11895 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:10:15][351240641364127][11942 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:10:15][351240641364127][11942 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:10:15][351240641364127][12004 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 11:10:15][351240641364127][12005 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 11:10:18][351240641364127][15019 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 11:10:18][351240641364127][15019 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641364127\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6080\"}'\'' -e'"" [2025-09-08 11:10:20][351240641364127][16504 ms][DEBUG] proc_open done in 1485 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-08 11:10:20][351240641364127][16504 ms][DEBUG] END runCmdUntilRes#2 in 1485 ms [2025-09-08 11:10:20][351240641364127][16505 ms][WARN] Detected error 2; Reboot the device [2025-09-08 11:10:20][351240641364127][16505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 11:10:20][351240641364127][16753 ms][DEBUG] SU: done in 249 ms; outsystem 1666 1303 7315972 122080 0 0 R system_server\n [2025-09-08 11:10:20][351240641364127][16753 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-08 11:10:20][351240641364127][17378 ms][DEBUG] SU: done in 625 ms; out [2025-09-08 11:11:03][351240641364127][0 ms][INFO] === Request start === [2025-09-08 11:11:03][351240641364127][1 ms][DEBUG] START check_scloud [2025-09-08 11:11:03][351240641364127][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:11:03][351240641364127][35 ms][DEBUG] SU: done in 34 ms; out [2025-09-08 11:11:03][351240641364127][35 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 11:11:03][351240641364127][67 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-08 11:11:03][351240641364127][67 ms][WARN] check_devices: no device [2025-09-08 11:11:03][351240641364127][67 ms][WARN] check_devices: no device [2025-09-08 11:11:03][351240641364127][67 ms][DEBUG] END check_scloud in 66 ms [2025-09-08 11:12:03][351240641364127][0 ms][INFO] === Request start === [2025-09-08 11:12:03][351240641364127][1 ms][DEBUG] START check_scloud [2025-09-08 11:12:03][351240641364127][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:12:03][351240641364127][382 ms][DEBUG] SU: done in 381 ms; out [2025-09-08 11:12:03][351240641364127][382 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 11:12:03][351240641364127][429 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 11:12:03][351240641364127][429 ms][DEBUG] check_devices: device found [2025-09-08 11:12:03][351240641364127][429 ms][WARN] targetPkg: not running, restarting [2025-09-08 11:12:03][351240641364127][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 11:12:03][351240641364127][569 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 11:12:03][351240641364127][569 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 11:12:04][351240641364127][897 ms][DEBUG] SU: done in 328 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 11:12:06][351240641364127][2912 ms][DEBUG] END check_scloud in 2911 ms [2025-09-08 11:12:06][351240641364127][2912 ms][DEBUG] START check_boot_completed [2025-09-08 11:12:06][351240641364127][2912 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:12:06][351240641364127][2959 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:12:06][351240641364127][2959 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:12:06][351240641364127][3022 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:12:06][351240641364127][3022 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 11:12:06][351240641364127][3022 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:12:06][351240641364127][3225 ms][DEBUG] SU: done in 203 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30642 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 351\nsuccessfulTxPacketsPerSecond: 14.661608719837607\nretriedTxPackets: 31\nretriedTxPacketsPerSecond: 1.2107579790595102\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 337\nsuccessfulRxPacketsPerSecond: 15.504806145005684\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:12:06][351240641364127][3225 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:12:07][351240641364127][3928 ms][DEBUG] SU: done in 702 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=160 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 160.109/160.109/160.109/0.000 ms\n [2025-09-08 11:12:07][351240641364127][3928 ms][DEBUG] check_internet: online [2025-09-08 11:12:07][351240641364127][3928 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:12:07][351240641364127][3928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641364127\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1357\"}'\'' -e'"" [2025-09-08 11:12:07][351240641364127][3928 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:12:07][351240641364127][3928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641364127\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1357\"}'\'' -e'"" [2025-09-08 11:12:13][351240641364127][9770 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c668483e-e4f5-4944-ae34-45c56f117be0","id":"QR_c668483e-e4f5-4944-ae34-45c56f117be0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:12:13][351240641364127][9926 ms][DEBUG] proc_open done in 5998 ms; code=255; res.len=3343 [2025-09-08 11:12:13][351240641364127][9926 ms][DEBUG] END runCmdUntilRes#1 in 5998 ms [2025-09-08 11:12:13][351240641364127][9926 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:12:15][351240641364127][1 ms][INFO] === Request start === [2025-09-08 11:12:15][351240641364127][1 ms][DEBUG] START check_scloud [2025-09-08 11:12:15][351240641364127][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:12:15][351240641364127][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 11517 4975 23541404 117468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:12:15][351240641364127][324 ms][DEBUG] targetPkg: running [2025-09-08 11:12:15][351240641364127][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-08 11:12:15][351240641364127][324 ms][DEBUG] START check_boot_completed [2025-09-08 11:12:15][351240641364127][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:12:15][351240641364127][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:12:15][351240641364127][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:12:15][351240641364127][433 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:12:15][351240641364127][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 11:12:15][351240641364127][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:12:16][351240641364127][605 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30642 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 351\nsuccessfulTxPacketsPerSecond: 14.661608719837607\nretriedTxPackets: 31\nretriedTxPacketsPerSecond: 1.2107579790595102\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 337\nsuccessfulRxPacketsPerSecond: 15.504806145005684\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:12:16][351240641364127][605 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:12:16][351240641364127][871 ms][DEBUG] SU: done in 266 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=158 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 158.748/158.748/158.748/0.000 ms\n [2025-09-08 11:12:16][351240641364127][871 ms][DEBUG] check_internet: online [2025-09-08 11:12:16][351240641364127][871 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:12:16][351240641364127][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641364127\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7893\"}'\'' -e'"" [2025-09-08 11:12:16][351240641364127][871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:12:16][351240641364127][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641364127\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7893\"}'\'' -e'"" [2025-09-08 11:12:21][351240641364127][6151 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da63732a-9580-4f5a-9712-35d12a9afcf0","id":"QR_da63732a-9580-4f5a-9712-35d12a9afcf0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:12:21][351240641364127][6307 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-09-08 11:12:21][351240641364127][6307 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-08 11:12:21][351240641364127][6307 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:13:03][352549938755154][0 ms][INFO] === Request start === [2025-09-08 11:13:03][352549938755154][1 ms][DEBUG] START check_scloud [2025-09-08 11:13:03][352549938755154][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:13:03][352549938755154][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 11517 4975 23617036 71500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:13:03][352549938755154][319 ms][DEBUG] targetPkg: running [2025-09-08 11:13:03][352549938755154][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 11:13:03][352549938755154][319 ms][DEBUG] START check_boot_completed [2025-09-08 11:13:03][352549938755154][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:13:03][352549938755154][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:13:03][352549938755154][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:13:03][352549938755154][460 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 11:13:03][352549938755154][460 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-08 11:13:03][352549938755154][460 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:13:03][352549938755154][460 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938755154\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7673\"}'\'' -e'"" [2025-09-08 11:13:03][352549938755154][460 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:13:03][352549938755154][460 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938755154\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7673\"}'\'' -e'"" [2025-09-08 11:13:07][352549938755154][4708 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b5fdc46-8f3d-4fd5-bd51-fb8046aa4343","id":"QR_8b5fdc46-8f3d-4fd5-bd51-fb8046aa4343","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:13:08][352549938755154][4865 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-09-08 11:13:08][352549938755154][4865 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-09-08 11:13:08][352549938755154][4865 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:13:10][352549938755154][0 ms][INFO] === Request start === [2025-09-08 11:13:10][352549938755154][1 ms][DEBUG] START check_scloud [2025-09-08 11:13:10][352549938755154][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:13:10][352549938755154][343 ms][DEBUG] SU: done in 343 ms; outu0_a118 11517 4975 23762504 90132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:13:10][352549938755154][343 ms][DEBUG] targetPkg: running [2025-09-08 11:13:10][352549938755154][344 ms][DEBUG] END check_scloud in 343 ms [2025-09-08 11:13:10][352549938755154][344 ms][DEBUG] START check_boot_completed [2025-09-08 11:13:10][352549938755154][344 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:13:10][352549938755154][390 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:13:10][352549938755154][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:13:10][352549938755154][437 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:13:10][352549938755154][437 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 11:13:10][352549938755154][437 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:13:10][352549938755154][437 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938755154\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3672\"}'\'' -e'"" [2025-09-08 11:13:10][352549938755154][437 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:13:10][352549938755154][437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938755154\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3672\"}'\'' -e'"" [2025-09-08 11:13:15][352549938755154][5232 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b269485-3343-4fc9-99e9-1ff1d7b3a12e","id":"QR_0b269485-3343-4fc9-99e9-1ff1d7b3a12e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:13:15][352549938755154][5389 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-09-08 11:13:15][352549938755154][5389 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-08 11:13:15][352549938755154][5389 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:17:03][350287315899863][1 ms][INFO] === Request start === [2025-09-08 11:17:03][350287315899863][1 ms][DEBUG] START check_scloud [2025-09-08 11:17:03][350287315899863][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:17:03][350287315899863][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 11517 4975 23908032 102152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:17:03][350287315899863][285 ms][DEBUG] targetPkg: running [2025-09-08 11:17:03][350287315899863][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-08 11:17:03][350287315899863][285 ms][DEBUG] START check_boot_completed [2025-09-08 11:17:03][350287315899863][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:17:03][350287315899863][329 ms][DEBUG] ADB: done in 44 ms; out [2025-09-08 11:17:03][350287315899863][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:17:03][350287315899863][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:17:03][350287315899863][376 ms][DEBUG] END check_boot_completed in 91 ms [2025-09-08 11:17:03][350287315899863][376 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:17:03][350287315899863][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315899863\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8974\"}'\'' -e'"" [2025-09-08 11:17:03][350287315899863][376 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:17:03][350287315899863][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315899863\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8974\"}'\'' -e'"" [2025-09-08 11:17:08][350287315899863][5328 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b332368b-46b0-40d5-bd1e-f64a3f249e6e","id":"QR_b332368b-46b0-40d5-bd1e-f64a3f249e6e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:17:09][350287315899863][5484 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-08 11:17:09][350287315899863][5484 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-08 11:17:09][350287315899863][5484 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:17:11][354644700047290][0 ms][INFO] === Request start === [2025-09-08 11:17:11][354644700047290][0 ms][DEBUG] START check_scloud [2025-09-08 11:17:11][354644700047290][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:17:11][354644700047290][265 ms][DEBUG] SU: done in 265 ms; outu0_a118 11517 4975 24084544 109084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:17:11][354644700047290][265 ms][DEBUG] targetPkg: running [2025-09-08 11:17:11][354644700047290][265 ms][DEBUG] END check_scloud in 265 ms [2025-09-08 11:17:11][354644700047290][265 ms][DEBUG] START check_boot_completed [2025-09-08 11:17:11][354644700047290][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:17:11][354644700047290][296 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:17:11][354644700047290][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:17:11][354644700047290][343 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:17:11][354644700047290][343 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:17:11][354644700047290][343 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:17:11][354644700047290][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354644700047290\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9915\"}'\'' -e'"" [2025-09-08 11:17:11][354644700047290][343 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:17:11][354644700047290][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354644700047290\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9915\"}'\'' -e'"" [2025-09-08 11:17:15][354644700047290][3811 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1aa63bb8-c504-4928-9419-a7fd36737d3e","id":"QR_1aa63bb8-c504-4928-9419-a7fd36737d3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:17:15][354644700047290][3968 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=3343 [2025-09-08 11:17:15][354644700047290][3968 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-08 11:17:15][354644700047290][3968 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:17:17][354644700047290][0 ms][INFO] === Request start === [2025-09-08 11:17:17][354644700047290][0 ms][DEBUG] START check_scloud [2025-09-08 11:17:17][354644700047290][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:17:17][354644700047290][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 11517 4975 24220296 118464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:17:17][354644700047290][297 ms][DEBUG] targetPkg: running [2025-09-08 11:17:17][354644700047290][297 ms][DEBUG] END check_scloud in 297 ms [2025-09-08 11:17:17][354644700047290][297 ms][DEBUG] START check_boot_completed [2025-09-08 11:17:17][354644700047290][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:17:17][354644700047290][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:17:17][354644700047290][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:17:17][354644700047290][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:17:17][354644700047290][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:17:17][354644700047290][375 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:17:17][354644700047290][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354644700047290\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8918\"}'\'' -e'"" [2025-09-08 11:17:17][354644700047290][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:17:17][354644700047290][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354644700047290\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8918\"}'\'' -e'"" [2025-09-08 11:17:22][354644700047290][5452 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cfe81ab7-a644-40e8-b740-d00c4629c45c","id":"QR_cfe81ab7-a644-40e8-b740-d00c4629c45c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:17:23][354644700047290][5608 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-08 11:17:23][354644700047290][5608 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-08 11:17:23][354644700047290][5608 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:17:27][350183774006233][0 ms][INFO] === Request start === [2025-09-08 11:17:27][350183774006233][0 ms][DEBUG] START check_scloud [2025-09-08 11:17:27][350183774006233][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:17:27][350183774006233][290 ms][DEBUG] SU: done in 290 ms; outu0_a118 11517 4975 24328876 130764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:17:27][350183774006233][290 ms][DEBUG] targetPkg: running [2025-09-08 11:17:27][350183774006233][290 ms][DEBUG] END check_scloud in 290 ms [2025-09-08 11:17:27][350183774006233][290 ms][DEBUG] START check_boot_completed [2025-09-08 11:17:27][350183774006233][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:17:27][350183774006233][337 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:17:27][350183774006233][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:17:27][350183774006233][399 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:17:27][350183774006233][400 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 11:17:27][350183774006233][400 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:17:27][350183774006233][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350183774006233\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2610\"}'\'' -e'"" [2025-09-08 11:17:27][350183774006233][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:17:27][350183774006233][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350183774006233\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2610\"}'\'' -e'"" [2025-09-08 11:17:31][350183774006233][3914 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1cb5de1-22fd-4f15-aac9-b4479b009054","id":"QR_d1cb5de1-22fd-4f15-aac9-b4479b009054","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:17:31][350183774006233][4070 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=3343 [2025-09-08 11:17:31][350183774006233][4070 ms][DEBUG] END runCmdUntilRes#1 in 3670 ms [2025-09-08 11:17:31][350183774006233][4070 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:17:33][350183774006233][0 ms][INFO] === Request start === [2025-09-08 11:17:33][350183774006233][1 ms][DEBUG] START check_scloud [2025-09-08 11:17:33][350183774006233][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:17:34][350183774006233][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 11517 4975 24463120 142412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:17:34][350183774006233][316 ms][DEBUG] targetPkg: running [2025-09-08 11:17:34][350183774006233][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 11:17:34][350183774006233][316 ms][DEBUG] START check_boot_completed [2025-09-08 11:17:34][350183774006233][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:17:34][350183774006233][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:17:34][350183774006233][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:17:34][350183774006233][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:17:34][350183774006233][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:17:34][350183774006233][394 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:17:34][350183774006233][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350183774006233\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9532\"}'\'' -e'"" [2025-09-08 11:17:34][350183774006233][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:17:34][350183774006233][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350183774006233\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9532\"}'\'' -e'"" [2025-09-08 11:17:39][350183774006233][5252 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88fd50bc-4b7b-48b8-97f3-9230529029e7","id":"QR_88fd50bc-4b7b-48b8-97f3-9230529029e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:17:39][350183774006233][5408 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-08 11:17:39][350183774006233][5408 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-08 11:17:39][350183774006233][5408 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:20:04][353302720980476][1 ms][INFO] === Request start === [2025-09-08 11:20:04][353302720980476][1 ms][DEBUG] START check_scloud [2025-09-08 11:20:04][353302720980476][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:20:04][353302720980476][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 11517 4975 24533932 153696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:20:04][353302720980476][304 ms][DEBUG] targetPkg: running [2025-09-08 11:20:04][353302720980476][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 11:20:04][353302720980476][304 ms][DEBUG] START check_boot_completed [2025-09-08 11:20:04][353302720980476][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:20:04][353302720980476][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:20:04][353302720980476][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:20:04][353302720980476][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:20:04][353302720980476][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:20:04][353302720980476][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:20:04][353302720980476][508 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30642 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1005\nsuccessfulTxPacketsPerSecond: 2.3860775657630704\nretriedTxPackets: 99\nretriedTxPacketsPerSecond: 0.24809369185304098\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1049\nsuccessfulRxPacketsPerSecond: 2.5976868911671347\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:20:04][353302720980476][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:20:06][353302720980476][2085 ms][DEBUG] SU: done in 1578 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=207 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 207.319/207.319/207.319/0.000 ms\n [2025-09-08 11:20:06][353302720980476][2085 ms][DEBUG] check_internet: online [2025-09-08 11:20:06][353302720980476][2085 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:20:06][353302720980476][2086 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302720980476\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3349\"}'\'' -e'"" [2025-09-08 11:20:06][353302720980476][2086 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:20:06][353302720980476][2086 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302720980476\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3349\"}'\'' -e'"" [2025-09-08 11:20:10][353302720980476][6397 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_897ec377-1034-4f9e-b90e-71c7b1779dce","id":"QR_897ec377-1034-4f9e-b90e-71c7b1779dce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:20:10][353302720980476][6553 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-09-08 11:20:10][353302720980476][6553 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-09-08 11:20:10][353302720980476][6553 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:20:13][353302720980476][0 ms][INFO] === Request start === [2025-09-08 11:20:13][353302720980476][1 ms][DEBUG] START check_scloud [2025-09-08 11:20:13][353302720980476][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:20:13][353302720980476][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 11517 4975 24690740 164652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:20:13][353302720980476][299 ms][DEBUG] targetPkg: running [2025-09-08 11:20:13][353302720980476][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 11:20:13][353302720980476][299 ms][DEBUG] START check_boot_completed [2025-09-08 11:20:13][353302720980476][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:20:13][353302720980476][344 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 11:20:13][353302720980476][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:20:13][353302720980476][407 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 11:20:13][353302720980476][407 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 11:20:13][353302720980476][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:20:13][353302720980476][532 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30642 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1005\nsuccessfulTxPacketsPerSecond: 2.3860775657630704\nretriedTxPackets: 99\nretriedTxPacketsPerSecond: 0.24809369185304098\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1049\nsuccessfulRxPacketsPerSecond: 2.5976868911671347\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:20:13][353302720980476][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:20:13][353302720980476][922 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=265 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 265.554/265.554/265.554/0.000 ms\n [2025-09-08 11:20:13][353302720980476][922 ms][DEBUG] check_internet: online [2025-09-08 11:20:13][353302720980476][923 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:20:13][353302720980476][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302720980476\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MWD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7786\"}'\'' -e'"" [2025-09-08 11:20:13][353302720980476][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:20:13][353302720980476][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302720980476\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MWD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7786\"}'\'' -e'"" [2025-09-08 11:20:19][353302720980476][6077 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10659db0-5074-4c45-a708-4e5511a134dc","id":"QR_10659db0-5074-4c45-a708-4e5511a134dc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:20:19][353302720980476][6233 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-08 11:20:19][353302720980476][6233 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 11:20:19][353302720980476][6233 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:21:03][357450472992995][0 ms][INFO] === Request start === [2025-09-08 11:21:03][357450472992995][1 ms][DEBUG] START check_scloud [2025-09-08 11:21:03][357450472992995][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:21:04][357450472992995][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 11517 4975 24802424 175172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:21:04][357450472992995][317 ms][DEBUG] targetPkg: running [2025-09-08 11:21:04][357450472992995][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 11:21:04][357450472992995][317 ms][DEBUG] START check_boot_completed [2025-09-08 11:21:04][357450472992995][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:21:04][357450472992995][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:21:04][357450472992995][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:21:04][357450472992995][428 ms][DEBUG] SU: done in 64 ms; out [2025-09-08 11:21:04][357450472992995][428 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-08 11:21:04][357450472992995][428 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:21:04][357450472992995][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450472992995\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4519\"}'\'' -e'"" [2025-09-08 11:21:04][357450472992995][428 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:21:04][357450472992995][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450472992995\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4519\"}'\'' -e'"" [2025-09-08 11:21:09][357450472992995][5238 ms][DEBUG] proc_open done in 4810 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 11:21:09][357450472992995][5238 ms][DEBUG] END runCmdUntilRes#1 in 4810 ms [2025-09-08 11:21:09][357450472992995][5238 ms][WARN] Detected error: Process with pid 11517 either refused to load frida-agent, or terminated during injectionProcess with pid 11517 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 11:21:09][357450472992995][5238 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 11:21:09][357450472992995][5520 ms][DEBUG] SU: done in 282 ms; outsystem 5398 4975 12909344 579668 ep_poll 0 S system_server\n [2025-09-08 11:21:09][357450472992995][5521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 11:21:09][357450472992995][5660 ms][DEBUG] SU: done in 139 ms; out [2025-09-08 11:21:09][357450472992995][5660 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 11:21:09][357450472992995][5660 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 11:21:09][357450472992995][5785 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 11:21:09][357450472992995][5785 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 11:21:09][357450472992995][5957 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 11:21:11][357450472992995][7972 ms][DEBUG] START check_boot_completed [2025-09-08 11:21:11][357450472992995][7972 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:21:11][357450472992995][8019 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:21:11][357450472992995][8019 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:21:11][357450472992995][8065 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:21:11][357450472992995][8065 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 11:21:14][357450472992995][11080 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 11:21:14][357450472992995][11080 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450472992995\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4519\"}'\'' -e'"" [2025-09-08 11:21:19][357450472992995][15314 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80918659-8c06-4f06-b1c0-8fb16fd2baed","id":"QR_80918659-8c06-4f06-b1c0-8fb16fd2baed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:21:19][357450472992995][15470 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-08 11:21:19][357450472992995][15470 ms][DEBUG] END runCmdUntilRes#2 in 4390 ms [2025-09-08 11:21:19][357450472992995][15470 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:21:21][357450472992995][0 ms][INFO] === Request start === [2025-09-08 11:21:21][357450472992995][1 ms][DEBUG] START check_scloud [2025-09-08 11:21:21][357450472992995][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:21:21][357450472992995][253 ms][DEBUG] SU: done in 253 ms; outu0_a118 17827 4975 23532228 124724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:21:21][357450472992995][253 ms][DEBUG] targetPkg: running [2025-09-08 11:21:21][357450472992995][253 ms][DEBUG] END check_scloud in 253 ms [2025-09-08 11:21:21][357450472992995][253 ms][DEBUG] START check_boot_completed [2025-09-08 11:21:21][357450472992995][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:21:21][357450472992995][300 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:21:21][357450472992995][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:21:21][357450472992995][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:21:21][357450472992995][347 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 11:21:21][357450472992995][347 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:21:21][357450472992995][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450472992995\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2641\"}'\'' -e'"" [2025-09-08 11:21:21][357450472992995][347 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:21:21][357450472992995][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450472992995\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2641\"}'\'' -e'"" [2025-09-08 11:21:26][357450472992995][5471 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_305423ab-d769-4b76-b4b9-c3178251111b","id":"QR_305423ab-d769-4b76-b4b9-c3178251111b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:21:27][357450472992995][5627 ms][DEBUG] proc_open done in 5279 ms; code=255; res.len=3343 [2025-09-08 11:21:27][357450472992995][5627 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-09-08 11:21:27][357450472992995][5627 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:23:05][350278500576119][1 ms][INFO] === Request start === [2025-09-08 11:23:05][350278500576119][1 ms][DEBUG] START check_scloud [2025-09-08 11:23:05][350278500576119][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:23:05][350278500576119][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 17827 4975 23593568 137696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:23:05][350278500576119][296 ms][DEBUG] targetPkg: running [2025-09-08 11:23:05][350278500576119][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-08 11:23:05][350278500576119][296 ms][DEBUG] START check_boot_completed [2025-09-08 11:23:05][350278500576119][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:23:05][350278500576119][327 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:23:05][350278500576119][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:23:05][350278500576119][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:23:05][350278500576119][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:23:05][350278500576119][374 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:23:05][350278500576119][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350278500576119\",\"model\":\"SM-X610\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52Y1053YDV\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7834\"}'\'' -e'"" [2025-09-08 11:23:05][350278500576119][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:23:05][350278500576119][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350278500576119\",\"model\":\"SM-X610\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52Y1053YDV\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7834\"}'\'' -e'"" [2025-09-08 11:23:10][350278500576119][4873 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3886a07e-b786-4725-bc88-ee9c5b074753","id":"QR_3886a07e-b786-4725-bc88-ee9c5b074753","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:23:10][350278500576119][5029 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-09-08 11:23:10][350278500576119][5029 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-09-08 11:23:10][350278500576119][5029 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:24:03][352773717729368][0 ms][INFO] === Request start === [2025-09-08 11:24:03][352773717729368][1 ms][DEBUG] START check_scloud [2025-09-08 11:24:03][352773717729368][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:24:03][352773717729368][284 ms][DEBUG] SU: done in 284 ms; outu0_a118 17827 4975 23729940 149388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:24:03][352773717729368][284 ms][DEBUG] targetPkg: running [2025-09-08 11:24:03][352773717729368][284 ms][DEBUG] END check_scloud in 284 ms [2025-09-08 11:24:03][352773717729368][284 ms][DEBUG] START check_boot_completed [2025-09-08 11:24:03][352773717729368][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:24:03][352773717729368][316 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:24:03][352773717729368][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:24:03][352773717729368][378 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 11:24:03][352773717729368][378 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 11:24:03][352773717729368][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:24:03][352773717729368][536 ms][DEBUG] SU: done in 158 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30642 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1311\nsuccessfulTxPacketsPerSecond: 1.0160610699189476\nretriedTxPackets: 179\nretriedTxPacketsPerSecond: 0.26563688102456146\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1310\nsuccessfulRxPacketsPerSecond: 0.8666403243426317\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:24:03][352773717729368][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:24:04][352773717729368][863 ms][DEBUG] SU: done in 326 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=208 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 208.886/208.886/208.886/0.000 ms\n [2025-09-08 11:24:04][352773717729368][863 ms][DEBUG] check_internet: online [2025-09-08 11:24:04][352773717729368][863 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:24:04][352773717729368][863 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773717729368\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2360\"}'\'' -e'"" [2025-09-08 11:24:04][352773717729368][863 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:24:04][352773717729368][863 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773717729368\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2360\"}'\'' -e'"" [2025-09-08 11:24:07][352773717729368][4330 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c3b7976-e7a4-4515-bc90-8f66eca6232f","id":"QR_4c3b7976-e7a4-4515-bc90-8f66eca6232f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:24:07][352773717729368][4486 ms][DEBUG] proc_open done in 3623 ms; code=255; res.len=3343 [2025-09-08 11:24:07][352773717729368][4487 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-08 11:24:07][352773717729368][4487 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:24:09][352773717729368][0 ms][INFO] === Request start === [2025-09-08 11:24:09][352773717729368][1 ms][DEBUG] START check_scloud [2025-09-08 11:24:09][352773717729368][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:24:10][352773717729368][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 17827 4975 23878492 160456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:24:10][352773717729368][298 ms][DEBUG] targetPkg: running [2025-09-08 11:24:10][352773717729368][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-08 11:24:10][352773717729368][298 ms][DEBUG] START check_boot_completed [2025-09-08 11:24:10][352773717729368][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:24:10][352773717729368][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:24:10][352773717729368][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:24:10][352773717729368][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:24:10][352773717729368][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 11:24:10][352773717729368][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:24:10][352773717729368][516 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30642 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1311\nsuccessfulTxPacketsPerSecond: 1.0160610699189476\nretriedTxPackets: 179\nretriedTxPacketsPerSecond: 0.26563688102456146\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1310\nsuccessfulRxPacketsPerSecond: 0.8666403243426317\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:24:10][352773717729368][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:24:10][352773717729368][813 ms][DEBUG] SU: done in 296 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.695/187.695/187.695/0.000 ms\n [2025-09-08 11:24:10][352773717729368][813 ms][DEBUG] check_internet: online [2025-09-08 11:24:10][352773717729368][813 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:24:10][352773717729368][813 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773717729368\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9194\"}'\'' -e'"" [2025-09-08 11:24:10][352773717729368][813 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:24:10][352773717729368][813 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773717729368\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9194\"}'\'' -e'"" [2025-09-08 11:24:16][352773717729368][6780 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a638ee9b-42f9-47e5-a9e4-f980624b2985","id":"QR_a638ee9b-42f9-47e5-a9e4-f980624b2985","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:24:16][352773717729368][6936 ms][DEBUG] proc_open done in 6123 ms; code=255; res.len=3343 [2025-09-08 11:24:16][352773717729368][6937 ms][DEBUG] END runCmdUntilRes#1 in 6123 ms [2025-09-08 11:24:16][352773717729368][6937 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:29:03][352549930902549][1 ms][INFO] === Request start === [2025-09-08 11:29:03][352549930902549][1 ms][DEBUG] START check_scloud [2025-09-08 11:29:03][352549930902549][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:29:03][352549930902549][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 17827 4975 24008732 171556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:29:03][352549930902549][294 ms][DEBUG] targetPkg: running [2025-09-08 11:29:03][352549930902549][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-08 11:29:03][352549930902549][294 ms][DEBUG] START check_boot_completed [2025-09-08 11:29:03][352549930902549][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:29:03][352549930902549][325 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:29:03][352549930902549][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:29:04][352549930902549][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:29:04][352549930902549][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:29:04][352549930902549][372 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:29:04][352549930902549][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549930902549\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9054\"}'\'' -e'"" [2025-09-08 11:29:04][352549930902549][372 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:29:04][352549930902549][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549930902549\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9054\"}'\'' -e'"" [2025-09-08 11:29:08][352549930902549][5324 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f883bea-0560-45a3-bd0f-65277bc9c4ff","id":"QR_3f883bea-0560-45a3-bd0f-65277bc9c4ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:29:09][352549930902549][5480 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-08 11:29:09][352549930902549][5480 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-08 11:29:09][352549930902549][5480 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:29:11][352549930902549][0 ms][INFO] === Request start === [2025-09-08 11:29:11][352549930902549][1 ms][DEBUG] START check_scloud [2025-09-08 11:29:11][352549930902549][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:29:11][352549930902549][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 17827 4975 24133980 183796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:29:11][352549930902549][312 ms][DEBUG] targetPkg: running [2025-09-08 11:29:11][352549930902549][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 11:29:11][352549930902549][312 ms][DEBUG] START check_boot_completed [2025-09-08 11:29:11][352549930902549][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:29:11][352549930902549][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:29:11][352549930902549][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:29:11][352549930902549][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:29:11][352549930902549][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 11:29:11][352549930902549][406 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:29:11][352549930902549][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549930902549\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6285\"}'\'' -e'"" [2025-09-08 11:29:11][352549930902549][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:29:11][352549930902549][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549930902549\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6285\"}'\'' -e'"" [2025-09-08 11:29:16][352549930902549][5545 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_709b9c32-1a50-4c08-ba98-0f087dad772b","id":"QR_709b9c32-1a50-4c08-ba98-0f087dad772b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:29:17][352549930902549][5701 ms][DEBUG] proc_open done in 5296 ms; code=255; res.len=3343 [2025-09-08 11:29:17][352549930902549][5701 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-09-08 11:29:17][352549930902549][5702 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:29:21][355362110346843][0 ms][INFO] === Request start === [2025-09-08 11:29:21][355362110346843][1 ms][DEBUG] START check_scloud [2025-09-08 11:29:21][355362110346843][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:29:21][355362110346843][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 17827 4975 24266340 193724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:29:21][355362110346843][296 ms][DEBUG] targetPkg: running [2025-09-08 11:29:21][355362110346843][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-08 11:29:21][355362110346843][296 ms][DEBUG] START check_boot_completed [2025-09-08 11:29:21][355362110346843][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:29:21][355362110346843][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:29:21][355362110346843][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:29:21][355362110346843][420 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 11:29:21][355362110346843][420 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-08 11:29:21][355362110346843][420 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:29:21][355362110346843][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362110346843\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1610\"}'\'' -e'"" [2025-09-08 11:29:21][355362110346843][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:29:21][355362110346843][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362110346843\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1610\"}'\'' -e'"" [2025-09-08 11:29:25][355362110346843][3826 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a346e8a-495a-482e-8582-21e0e0488602","id":"QR_0a346e8a-495a-482e-8582-21e0e0488602","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:29:25][355362110346843][3982 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-08 11:29:25][355362110346843][3982 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-09-08 11:29:25][355362110346843][3982 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:29:27][355362110346843][0 ms][INFO] === Request start === [2025-09-08 11:29:27][355362110346843][1 ms][DEBUG] START check_scloud [2025-09-08 11:29:27][355362110346843][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:29:27][355362110346843][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 17827 4975 24412808 204644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:29:27][355362110346843][301 ms][DEBUG] targetPkg: running [2025-09-08 11:29:27][355362110346843][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-08 11:29:27][355362110346843][301 ms][DEBUG] START check_boot_completed [2025-09-08 11:29:27][355362110346843][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:29:27][355362110346843][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:29:27][355362110346843][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:29:27][355362110346843][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:29:27][355362110346843][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:29:27][355362110346843][379 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:29:27][355362110346843][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362110346843\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6671\"}'\'' -e'"" [2025-09-08 11:29:27][355362110346843][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:29:27][355362110346843][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362110346843\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6671\"}'\'' -e'"" [2025-09-08 11:29:32][355362110346843][5159 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_291d6dee-5e69-4683-a8ba-d38dcca4f052","id":"QR_291d6dee-5e69-4683-a8ba-d38dcca4f052","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:29:32][355362110346843][5315 ms][DEBUG] proc_open done in 4935 ms; code=255; res.len=3343 [2025-09-08 11:29:32][355362110346843][5315 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-08 11:29:32][355362110346843][5315 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:31:03][358680106142356][0 ms][INFO] === Request start === [2025-09-08 11:31:03][358680106142356][1 ms][DEBUG] START check_scloud [2025-09-08 11:31:03][358680106142356][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:31:03][358680106142356][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 17827 4975 24534692 215448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:31:03][358680106142356][321 ms][DEBUG] targetPkg: running [2025-09-08 11:31:03][358680106142356][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-08 11:31:03][358680106142356][321 ms][DEBUG] START check_boot_completed [2025-09-08 11:31:03][358680106142356][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:31:03][358680106142356][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:31:03][358680106142356][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:31:03][358680106142356][431 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:31:03][358680106142356][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 11:31:03][358680106142356][431 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:31:03][358680106142356][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358680106142356\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MOB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2033\"}'\'' -e'"" [2025-09-08 11:31:03][358680106142356][431 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:31:03][358680106142356][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358680106142356\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MOB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2033\"}'\'' -e'"" [2025-09-08 11:31:08][358680106142356][5054 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e3b1eba-0afa-4282-ad47-44041e8d0103","id":"QR_2e3b1eba-0afa-4282-ad47-44041e8d0103","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:31:08][358680106142356][5210 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-09-08 11:31:08][358680106142356][5211 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-08 11:31:08][358680106142356][5211 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:31:10][358680106142356][1 ms][INFO] === Request start === [2025-09-08 11:31:10][358680106142356][1 ms][DEBUG] START check_scloud [2025-09-08 11:31:10][358680106142356][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:31:11][358680106142356][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 17827 4975 24700716 222444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:31:11][358680106142356][302 ms][DEBUG] targetPkg: running [2025-09-08 11:31:11][358680106142356][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 11:31:11][358680106142356][302 ms][DEBUG] START check_boot_completed [2025-09-08 11:31:11][358680106142356][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:31:11][358680106142356][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:31:11][358680106142356][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:31:11][358680106142356][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:31:11][358680106142356][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:31:11][358680106142356][380 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:31:11][358680106142356][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358680106142356\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MOB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1791\"}'\'' -e'"" [2025-09-08 11:31:11][358680106142356][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:31:11][358680106142356][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358680106142356\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MOB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1791\"}'\'' -e'"" [2025-09-08 11:31:16][358680106142356][5488 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa0aed97-b513-4243-9897-daa1690ea50b","id":"QR_aa0aed97-b513-4243-9897-daa1690ea50b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:31:16][358680106142356][5644 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-08 11:31:16][358680106142356][5645 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-09-08 11:31:16][358680106142356][5645 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:35:03][351477975091484][1 ms][INFO] === Request start === [2025-09-08 11:35:03][351477975091484][1 ms][DEBUG] START check_scloud [2025-09-08 11:35:03][351477975091484][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:35:03][351477975091484][290 ms][DEBUG] SU: done in 288 ms; outu0_a118 17827 4975 24828908 225344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:35:03][351477975091484][290 ms][DEBUG] targetPkg: running [2025-09-08 11:35:03][351477975091484][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 11:35:03][351477975091484][290 ms][DEBUG] START check_boot_completed [2025-09-08 11:35:03][351477975091484][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:35:03][351477975091484][321 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:35:03][351477975091484][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:35:03][351477975091484][383 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 11:35:03][351477975091484][384 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 11:35:03][351477975091484][384 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:35:03][351477975091484][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477975091484\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8270\"}'\'' -e'"" [2025-09-08 11:35:03][351477975091484][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:35:03][351477975091484][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477975091484\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8270\"}'\'' -e'"" [2025-09-08 11:35:07][351477975091484][4273 ms][DEBUG] proc_open done in 3889 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 11:35:07][351477975091484][4273 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-08 11:35:07][351477975091484][4273 ms][WARN] Detected error: Process with pid 17827 either refused to load frida-agent, or terminated during injectionProcess with pid 17827 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 11:35:07][351477975091484][4273 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 11:35:07][351477975091484][4523 ms][DEBUG] SU: done in 250 ms; outsystem 5398 4975 12507696 258708 ep_poll 0 S system_server\n [2025-09-08 11:35:07][351477975091484][4523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 11:35:08][351477975091484][4679 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 11:35:08][351477975091484][4679 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 11:35:08][351477975091484][4679 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 11:35:08][351477975091484][4804 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 11:35:08][351477975091484][4804 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 11:35:08][351477975091484][4976 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 11:35:10][351477975091484][6991 ms][DEBUG] START check_boot_completed [2025-09-08 11:35:10][351477975091484][6991 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:35:10][351477975091484][7038 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:35:10][351477975091484][7038 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:35:10][351477975091484][7086 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 11:35:10][351477975091484][7086 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 11:35:13][351477975091484][10100 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 11:35:13][351477975091484][10100 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477975091484\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8270\"}'\'' -e'"" [2025-09-08 11:35:17][351477975091484][14036 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_152a0128-e578-4034-8fea-6de0242631cf","id":"QR_152a0128-e578-4034-8fea-6de0242631cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:35:17][351477975091484][14193 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-09-08 11:35:17][351477975091484][14193 ms][DEBUG] END runCmdUntilRes#2 in 4093 ms [2025-09-08 11:35:17][351477975091484][14193 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:35:19][351477975091484][0 ms][INFO] === Request start === [2025-09-08 11:35:19][351477975091484][1 ms][DEBUG] START check_scloud [2025-09-08 11:35:19][351477975091484][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:35:20][351477975091484][254 ms][DEBUG] SU: done in 254 ms; outu0_a118 19739 4975 23525088 124652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:35:20][351477975091484][254 ms][DEBUG] targetPkg: running [2025-09-08 11:35:20][351477975091484][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-08 11:35:20][351477975091484][255 ms][DEBUG] START check_boot_completed [2025-09-08 11:35:20][351477975091484][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:35:20][351477975091484][301 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:35:20][351477975091484][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:35:20][351477975091484][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:35:20][351477975091484][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 11:35:20][351477975091484][348 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:35:20][351477975091484][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477975091484\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4749\"}'\'' -e'"" [2025-09-08 11:35:20][351477975091484][348 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:35:20][351477975091484][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477975091484\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4749\"}'\'' -e'"" [2025-09-08 11:35:25][351477975091484][5409 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d9b284d-9b26-4683-9c4e-579e54263525","id":"QR_3d9b284d-9b26-4683-9c4e-579e54263525","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:35:25][351477975091484][5566 ms][DEBUG] proc_open done in 5218 ms; code=255; res.len=3343 [2025-09-08 11:35:25][351477975091484][5566 ms][DEBUG] END runCmdUntilRes#1 in 5218 ms [2025-09-08 11:35:25][351477975091484][5566 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:35:29][353684147760577][0 ms][INFO] === Request start === [2025-09-08 11:35:29][353684147760577][1 ms][DEBUG] START check_scloud [2025-09-08 11:35:29][353684147760577][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:35:30][353684147760577][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 19739 4975 23727056 138256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:35:30][353684147760577][308 ms][DEBUG] targetPkg: running [2025-09-08 11:35:30][353684147760577][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 11:35:30][353684147760577][308 ms][DEBUG] START check_boot_completed [2025-09-08 11:35:30][353684147760577][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:35:30][353684147760577][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:35:30][353684147760577][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:35:30][353684147760577][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:35:30][353684147760577][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 11:35:30][353684147760577][401 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:35:30][353684147760577][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684147760577\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4822\"}'\'' -e'"" [2025-09-08 11:35:30][353684147760577][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:35:30][353684147760577][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684147760577\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4822\"}'\'' -e'"" [2025-09-08 11:35:33][353684147760577][3744 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9fe1b4f3-8f23-445b-bdfd-53f0e330d9e7","id":"QR_9fe1b4f3-8f23-445b-bdfd-53f0e330d9e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:35:33][353684147760577][3900 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-08 11:35:33][353684147760577][3900 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-08 11:35:33][353684147760577][3901 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:35:35][353684147760577][0 ms][INFO] === Request start === [2025-09-08 11:35:35][353684147760577][1 ms][DEBUG] START check_scloud [2025-09-08 11:35:35][353684147760577][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:35:36][353684147760577][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 19739 4975 23863412 150156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:35:36][353684147760577][290 ms][DEBUG] targetPkg: running [2025-09-08 11:35:36][353684147760577][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 11:35:36][353684147760577][290 ms][DEBUG] START check_boot_completed [2025-09-08 11:35:36][353684147760577][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:35:36][353684147760577][336 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:35:36][353684147760577][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:35:36][353684147760577][415 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 11:35:36][353684147760577][415 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 11:35:36][353684147760577][415 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:35:36][353684147760577][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684147760577\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7983\"}'\'' -e'"" [2025-09-08 11:35:36][353684147760577][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:35:36][353684147760577][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684147760577\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7983\"}'\'' -e'"" [2025-09-08 11:35:41][353684147760577][5148 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72984263-ecb1-4951-9d97-6987fc117985","id":"QR_72984263-ecb1-4951-9d97-6987fc117985","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:35:41][353684147760577][5304 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-08 11:35:41][353684147760577][5304 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-08 11:35:41][353684147760577][5304 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:36:03][352838650837153][0 ms][INFO] === Request start === [2025-09-08 11:36:03][352838650837153][1 ms][DEBUG] START check_scloud [2025-09-08 11:36:03][352838650837153][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:36:03][352838650837153][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 19739 4975 23915360 161728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:36:03][352838650837153][312 ms][DEBUG] targetPkg: running [2025-09-08 11:36:03][352838650837153][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 11:36:03][352838650837153][312 ms][DEBUG] START check_boot_completed [2025-09-08 11:36:03][352838650837153][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:36:04][352838650837153][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:36:04][352838650837153][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:36:04][352838650837153][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:36:04][352838650837153][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 11:36:04][352838650837153][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:36:04][352838650837153][530 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30642 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1674\nsuccessfulTxPacketsPerSecond: 0.6477652100254123\nretriedTxPackets: 272\nretriedTxPacketsPerSecond: 0.16277177072433438\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1635\nsuccessfulRxPacketsPerSecond: 0.5713621339711329\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:36:04][352838650837153][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:36:05][352838650837153][2295 ms][DEBUG] SU: done in 1765 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.655/198.655/198.655/0.000 ms\n [2025-09-08 11:36:05][352838650837153][2295 ms][DEBUG] check_internet: online [2025-09-08 11:36:05][352838650837153][2295 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:36:05][352838650837153][2296 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838650837153\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4182\"}'\'' -e'"" [2025-09-08 11:36:05][352838650837153][2296 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:36:05][352838650837153][2296 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838650837153\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4182\"}'\'' -e'"" [2025-09-08 11:36:09][352838650837153][5826 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1bb46188-1bd1-4044-87de-eb15420985af","id":"QR_1bb46188-1bd1-4044-87de-eb15420985af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:36:09][352838650837153][5982 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-09-08 11:36:09][352838650837153][5982 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-09-08 11:36:09][352838650837153][5982 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:36:11][352838650837153][0 ms][INFO] === Request start === [2025-09-08 11:36:11][352838650837153][1 ms][DEBUG] START check_scloud [2025-09-08 11:36:11][352838650837153][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:36:12][352838650837153][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 19739 4975 24047720 172340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:36:12][352838650837153][264 ms][DEBUG] targetPkg: running [2025-09-08 11:36:12][352838650837153][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-08 11:36:12][352838650837153][264 ms][DEBUG] START check_boot_completed [2025-09-08 11:36:12][352838650837153][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:36:12][352838650837153][311 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:36:12][352838650837153][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:36:12][352838650837153][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:36:12][352838650837153][358 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 11:36:12][352838650837153][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:36:12][352838650837153][467 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30642 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1674\nsuccessfulTxPacketsPerSecond: 0.6477652100254123\nretriedTxPackets: 272\nretriedTxPacketsPerSecond: 0.16277177072433438\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1635\nsuccessfulRxPacketsPerSecond: 0.5713621339711329\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:36:12][352838650837153][467 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:36:12][352838650837153][826 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=264 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 264.086/264.086/264.086/0.000 ms\n [2025-09-08 11:36:12][352838650837153][826 ms][DEBUG] check_internet: online [2025-09-08 11:36:12][352838650837153][826 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:36:12][352838650837153][826 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838650837153\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6197\"}'\'' -e'"" [2025-09-08 11:36:12][352838650837153][827 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:36:12][352838650837153][827 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838650837153\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6197\"}'\'' -e'"" [2025-09-08 11:36:17][352838650837153][5684 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48629276-f7b0-4c26-8879-75c49a45a883","id":"QR_48629276-f7b0-4c26-8879-75c49a45a883","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:36:17][352838650837153][5840 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-08 11:36:17][352838650837153][5840 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-08 11:36:17][352838650837153][5840 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:37:03][354626221479060][0 ms][INFO] === Request start === [2025-09-08 11:37:03][354626221479060][1 ms][DEBUG] START check_scloud [2025-09-08 11:37:03][354626221479060][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:37:03][354626221479060][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 19739 4975 24175912 184400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:37:03][354626221479060][278 ms][DEBUG] targetPkg: running [2025-09-08 11:37:03][354626221479060][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-08 11:37:03][354626221479060][278 ms][DEBUG] START check_boot_completed [2025-09-08 11:37:03][354626221479060][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:37:03][354626221479060][309 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:37:03][354626221479060][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:37:03][354626221479060][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:37:03][354626221479060][356 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:37:03][354626221479060][356 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:37:03][354626221479060][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626221479060\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5184\"}'\'' -e'"" [2025-09-08 11:37:03][354626221479060][356 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:37:03][354626221479060][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626221479060\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5184\"}'\'' -e'"" [2025-09-08 11:37:08][354626221479060][4871 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_949f6c53-4c67-4a88-b5ce-408d65e378b8","id":"QR_949f6c53-4c67-4a88-b5ce-408d65e378b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:37:08][354626221479060][5027 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-09-08 11:37:08][354626221479060][5027 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-09-08 11:37:08][354626221479060][5027 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:37:10][354626221479060][1 ms][INFO] === Request start === [2025-09-08 11:37:10][354626221479060][1 ms][DEBUG] START check_scloud [2025-09-08 11:37:10][354626221479060][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:37:11][354626221479060][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 19739 4975 24319332 195592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:37:11][354626221479060][307 ms][DEBUG] targetPkg: running [2025-09-08 11:37:11][354626221479060][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 11:37:11][354626221479060][307 ms][DEBUG] START check_boot_completed [2025-09-08 11:37:11][354626221479060][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:37:11][354626221479060][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:37:11][354626221479060][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:37:11][354626221479060][402 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 11:37:11][354626221479060][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 11:37:11][354626221479060][402 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:37:11][354626221479060][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626221479060\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5213\"}'\'' -e'"" [2025-09-08 11:37:11][354626221479060][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:37:11][354626221479060][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626221479060\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5213\"}'\'' -e'"" [2025-09-08 11:37:16][354626221479060][5680 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4a36e56-abf7-49f6-b15a-efca53607ad3","id":"QR_d4a36e56-abf7-49f6-b15a-efca53607ad3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:37:16][354626221479060][5837 ms][DEBUG] proc_open done in 5435 ms; code=255; res.len=3343 [2025-09-08 11:37:16][354626221479060][5837 ms][DEBUG] END runCmdUntilRes#1 in 5435 ms [2025-09-08 11:37:16][354626221479060][5837 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:38:03][351199554864012][0 ms][INFO] === Request start === [2025-09-08 11:38:03][351199554864012][1 ms][DEBUG] START check_scloud [2025-09-08 11:38:03][351199554864012][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:38:03][351199554864012][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 19739 4975 24463844 207532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:38:03][351199554864012][264 ms][DEBUG] targetPkg: running [2025-09-08 11:38:03][351199554864012][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-08 11:38:03][351199554864012][264 ms][DEBUG] START check_boot_completed [2025-09-08 11:38:03][351199554864012][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:38:03][351199554864012][295 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:38:03][351199554864012][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:38:03][351199554864012][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:38:03][351199554864012][342 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:38:03][351199554864012][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:38:03][351199554864012][452 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30642 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1674\nsuccessfulTxPacketsPerSecond: 0.6477652100254123\nretriedTxPackets: 272\nretriedTxPacketsPerSecond: 0.16277177072433438\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1635\nsuccessfulRxPacketsPerSecond: 0.5713621339711329\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:38:03][351199554864012][452 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:38:04][351199554864012][748 ms][DEBUG] SU: done in 296 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.615/189.615/189.615/0.000 ms\n [2025-09-08 11:38:04][351199554864012][749 ms][DEBUG] check_internet: online [2025-09-08 11:38:04][351199554864012][749 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:38:04][351199554864012][749 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199554864012\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8797\"}'\'' -e'"" [2025-09-08 11:38:04][351199554864012][749 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:38:04][351199554864012][749 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199554864012\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8797\"}'\'' -e'"" [2025-09-08 11:38:08][351199554864012][5716 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ec24670-22aa-4d08-b3a5-c99f99c5fd1c","id":"QR_2ec24670-22aa-4d08-b3a5-c99f99c5fd1c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:38:09][351199554864012][5872 ms][DEBUG] proc_open done in 5123 ms; code=255; res.len=3343 [2025-09-08 11:38:09][351199554864012][5872 ms][DEBUG] END runCmdUntilRes#1 in 5123 ms [2025-09-08 11:38:09][351199554864012][5872 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:38:11][351199554864012][1 ms][INFO] === Request start === [2025-09-08 11:38:11][351199554864012][1 ms][DEBUG] START check_scloud [2025-09-08 11:38:11][351199554864012][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:38:11][351199554864012][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 19739 4975 24614508 217644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:38:11][351199554864012][291 ms][DEBUG] targetPkg: running [2025-09-08 11:38:11][351199554864012][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-08 11:38:11][351199554864012][291 ms][DEBUG] START check_boot_completed [2025-09-08 11:38:11][351199554864012][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:38:11][351199554864012][322 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:38:11][351199554864012][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:38:11][351199554864012][369 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:38:11][351199554864012][369 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:38:11][351199554864012][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:38:11][351199554864012][479 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30642 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1674\nsuccessfulTxPacketsPerSecond: 0.6477652100254123\nretriedTxPackets: 272\nretriedTxPacketsPerSecond: 0.16277177072433438\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1635\nsuccessfulRxPacketsPerSecond: 0.5713621339711329\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:38:11][351199554864012][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:38:12][351199554864012][808 ms][DEBUG] SU: done in 329 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.474/220.474/220.474/0.000 ms\n [2025-09-08 11:38:12][351199554864012][808 ms][DEBUG] check_internet: online [2025-09-08 11:38:12][351199554864012][808 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:38:12][351199554864012][808 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199554864012\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5290\"}'\'' -e'"" [2025-09-08 11:38:12][351199554864012][809 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:38:12][351199554864012][809 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199554864012\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5290\"}'\'' -e'"" [2025-09-08 11:38:17][351199554864012][5868 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e43248a6-e2db-476e-842f-0e8a1474f72a","id":"QR_e43248a6-e2db-476e-842f-0e8a1474f72a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:38:17][351199554864012][6024 ms][DEBUG] proc_open done in 5215 ms; code=255; res.len=3343 [2025-09-08 11:38:17][351199554864012][6024 ms][DEBUG] END runCmdUntilRes#1 in 5216 ms [2025-09-08 11:38:17][351199554864012][6024 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:42:03][353530670370856][1 ms][INFO] === Request start === [2025-09-08 11:42:03][353530670370856][1 ms][DEBUG] START check_scloud [2025-09-08 11:42:03][353530670370856][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:42:03][353530670370856][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 19739 4975 24711788 229888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:42:03][353530670370856][317 ms][DEBUG] targetPkg: running [2025-09-08 11:42:03][353530670370856][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 11:42:03][353530670370856][317 ms][DEBUG] START check_boot_completed [2025-09-08 11:42:03][353530670370856][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:42:04][353530670370856][348 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:42:04][353530670370856][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:42:04][353530670370856][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:42:04][353530670370856][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:42:04][353530670370856][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:42:04][353530670370856][505 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30642 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2004\nsuccessfulTxPacketsPerSecond: 0.13630593867936583\nretriedTxPackets: 360\nretriedTxPacketsPerSecond: 0.017038242334920732\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1917\nsuccessfulRxPacketsPerSecond: 0.13630593867936583\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:42:04][353530670370856][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:42:05][353530670370856][2238 ms][DEBUG] SU: done in 1734 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.837/198.837/198.837/0.000 ms\n [2025-09-08 11:42:05][353530670370856][2239 ms][DEBUG] check_internet: online [2025-09-08 11:42:05][353530670370856][2239 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:42:05][353530670370856][2239 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530670370856\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4268\"}'\'' -e'"" [2025-09-08 11:42:05][353530670370856][2239 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:42:05][353530670370856][2239 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530670370856\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4268\"}'\'' -e'"" [2025-09-08 11:42:10][353530670370856][6378 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca85d72d-8ef3-4906-9a5f-8aaf0ab63e2c","id":"QR_ca85d72d-8ef3-4906-9a5f-8aaf0ab63e2c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:42:10][353530670370856][6534 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-09-08 11:42:10][353530670370856][6534 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-09-08 11:42:10][353530670370856][6534 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:42:12][353530670370856][1 ms][INFO] === Request start === [2025-09-08 11:42:12][353530670370856][1 ms][DEBUG] START check_scloud [2025-09-08 11:42:12][353530670370856][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:42:12][353530670370856][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 19739 4975 24866548 240540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:42:12][353530670370856][261 ms][DEBUG] targetPkg: running [2025-09-08 11:42:12][353530670370856][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-08 11:42:12][353530670370856][261 ms][DEBUG] START check_boot_completed [2025-09-08 11:42:12][353530670370856][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:42:12][353530670370856][307 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:42:12][353530670370856][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:42:12][353530670370856][355 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:42:12][353530670370856][355 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 11:42:12][353530670370856][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:42:13][353530670370856][495 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30642 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2004\nsuccessfulTxPacketsPerSecond: 0.13630593867936583\nretriedTxPackets: 360\nretriedTxPacketsPerSecond: 0.017038242334920732\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1917\nsuccessfulRxPacketsPerSecond: 0.13630593867936583\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:42:13][353530670370856][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:42:13][353530670370856][839 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.731/237.731/237.731/0.000 ms\n [2025-09-08 11:42:13][353530670370856][839 ms][DEBUG] check_internet: online [2025-09-08 11:42:13][353530670370856][839 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:42:13][353530670370856][839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530670370856\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2306\"}'\'' -e'"" [2025-09-08 11:42:13][353530670370856][839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:42:13][353530670370856][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530670370856\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2306\"}'\'' -e'"" [2025-09-08 11:42:21][353530670370856][8728 ms][DEBUG] proc_open done in 7888 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 11:42:21][353530670370856][8728 ms][DEBUG] END runCmdUntilRes#1 in 7889 ms [2025-09-08 11:42:21][353530670370856][8728 ms][WARN] Detected error: Process with pid 19739 either refused to load frida-agent, or terminated during injectionProcess with pid 19739 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 11:42:21][353530670370856][8728 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 11:42:21][353530670370856][9024 ms][DEBUG] SU: done in 296 ms; out [2025-09-08 11:42:21][353530670370856][9024 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 11:42:21][353530670370856][9370 ms][DEBUG] SU: done in 346 ms; out [2025-09-08 11:42:21][353530670370856][9370 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 11:42:21][353530670370856][9370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 11:42:22][353530670370856][9649 ms][DEBUG] SU: done in 279 ms; out [2025-09-08 11:42:22][353530670370856][9649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 11:42:22][353530670370856][9977 ms][DEBUG] SU: done in 328 ms; out [2025-09-08 11:42:24][353530670370856][11992 ms][DEBUG] START check_boot_completed [2025-09-08 11:42:24][353530670370856][11992 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:42:24][353530670370856][12039 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:42:24][353530670370856][12039 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:42:24][353530670370856][12102 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:42:24][353530670370856][12102 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 11:42:27][353530670370856][15116 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 11:42:27][353530670370856][15117 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530670370856\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2306\"}'\'' -e'"" [2025-09-08 11:42:29][353530670370856][16694 ms][DEBUG] proc_open done in 1578 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-08 11:42:29][353530670370856][16694 ms][DEBUG] END runCmdUntilRes#2 in 1578 ms [2025-09-08 11:42:29][353530670370856][16695 ms][WARN] Detected error 2; Reboot the device [2025-09-08 11:42:29][353530670370856][16695 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 11:42:29][353530670370856][16960 ms][DEBUG] SU: done in 265 ms; outsystem 21563 21220 7535316 146528 0 0 R system_server\n [2025-09-08 11:42:29][353530670370856][16960 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-08 11:42:30][353530670370856][17585 ms][DEBUG] SU: done in 625 ms; out [2025-09-08 11:49:03][351978520394257][1 ms][INFO] === Request start === [2025-09-08 11:49:03][351978520394257][1 ms][DEBUG] START check_scloud [2025-09-08 11:49:03][351978520394257][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:49:03][351978520394257][328 ms][DEBUG] SU: done in 326 ms; out [2025-09-08 11:49:03][351978520394257][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 11:49:03][351978520394257][359 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 11:49:03][351978520394257][359 ms][DEBUG] check_devices: device found [2025-09-08 11:49:03][351978520394257][359 ms][WARN] targetPkg: not running, restarting [2025-09-08 11:49:03][351978520394257][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 11:49:03][351978520394257][499 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 11:49:03][351978520394257][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 11:49:03][351978520394257][703 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 11:49:05][351978520394257][2717 ms][DEBUG] END check_scloud in 2716 ms [2025-09-08 11:49:05][351978520394257][2718 ms][DEBUG] START check_boot_completed [2025-09-08 11:49:05][351978520394257][2718 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:49:05][351978520394257][2765 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:49:05][351978520394257][2765 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:49:05][351978520394257][2827 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:49:05][351978520394257][2827 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 11:49:05][351978520394257][2827 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:49:05][351978520394257][2827 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520394257\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7543\"}'\'' -e'"" [2025-09-08 11:49:05][351978520394257][2827 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:49:05][351978520394257][2828 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520394257\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7543\"}'\'' -e'"" [2025-09-08 11:49:11][351978520394257][8419 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a37c127-b9af-4298-aad0-5bc8017eb14c","id":"QR_9a37c127-b9af-4298-aad0-5bc8017eb14c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:49:11][351978520394257][8576 ms][DEBUG] proc_open done in 5748 ms; code=255; res.len=3343 [2025-09-08 11:49:11][351978520394257][8576 ms][DEBUG] END runCmdUntilRes#1 in 5748 ms [2025-09-08 11:49:11][351978520394257][8576 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:49:14][351978520394257][1 ms][INFO] === Request start === [2025-09-08 11:49:14][351978520394257][1 ms][DEBUG] START check_scloud [2025-09-08 11:49:14][351978520394257][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:49:14][351978520394257][331 ms][DEBUG] SU: done in 329 ms; outu0_a118 15639 4972 23835708 124156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:49:14][351978520394257][331 ms][DEBUG] targetPkg: running [2025-09-08 11:49:14][351978520394257][331 ms][DEBUG] END check_scloud in 330 ms [2025-09-08 11:49:14][351978520394257][331 ms][DEBUG] START check_boot_completed [2025-09-08 11:49:14][351978520394257][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:49:14][351978520394257][377 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:49:14][351978520394257][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:49:14][351978520394257][442 ms][DEBUG] SU: done in 64 ms; out [2025-09-08 11:49:14][351978520394257][442 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-08 11:49:14][351978520394257][442 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:49:14][351978520394257][442 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520394257\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7371\"}'\'' -e'"" [2025-09-08 11:49:14][351978520394257][442 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:49:14][351978520394257][442 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520394257\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7371\"}'\'' -e'"" [2025-09-08 11:49:19][351978520394257][5204 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d2d446a8-0adf-4beb-9ed2-b9ae9f6b584d","id":"QR_d2d446a8-0adf-4beb-9ed2-b9ae9f6b584d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:49:19][351978520394257][5361 ms][DEBUG] proc_open done in 4919 ms; code=255; res.len=3343 [2025-09-08 11:49:19][351978520394257][5361 ms][DEBUG] END runCmdUntilRes#1 in 4919 ms [2025-09-08 11:49:19][351978520394257][5361 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:49:24][352177396280497][0 ms][INFO] === Request start === [2025-09-08 11:49:24][352177396280497][0 ms][DEBUG] START check_scloud [2025-09-08 11:49:24][352177396280497][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:49:25][352177396280497][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 15639 4972 23993808 137516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:49:25][352177396280497][304 ms][DEBUG] targetPkg: running [2025-09-08 11:49:25][352177396280497][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 11:49:25][352177396280497][304 ms][DEBUG] START check_boot_completed [2025-09-08 11:49:25][352177396280497][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:49:25][352177396280497][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:49:25][352177396280497][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:49:25][352177396280497][413 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 11:49:25][352177396280497][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 11:49:25][352177396280497][413 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:49:25][352177396280497][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177396280497\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6830\"}'\'' -e'"" [2025-09-08 11:49:25][352177396280497][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:49:25][352177396280497][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177396280497\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6830\"}'\'' -e'"" [2025-09-08 11:49:29][352177396280497][5146 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43f4334f-694e-4161-8c46-9e004205c51d","id":"QR_43f4334f-694e-4161-8c46-9e004205c51d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:49:30][352177396280497][5302 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-08 11:49:30][352177396280497][5302 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-08 11:49:30][352177396280497][5302 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:49:33][352177396280497][0 ms][INFO] === Request start === [2025-09-08 11:49:33][352177396280497][1 ms][DEBUG] START check_scloud [2025-09-08 11:49:33][352177396280497][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:49:33][352177396280497][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 15639 4972 24160500 149396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:49:33][352177396280497][286 ms][DEBUG] targetPkg: running [2025-09-08 11:49:33][352177396280497][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-08 11:49:33][352177396280497][286 ms][DEBUG] START check_boot_completed [2025-09-08 11:49:33][352177396280497][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:49:33][352177396280497][333 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:49:33][352177396280497][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:49:33][352177396280497][380 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 11:49:33][352177396280497][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 11:49:33][352177396280497][381 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:49:33][352177396280497][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177396280497\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2534\"}'\'' -e'"" [2025-09-08 11:49:33][352177396280497][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:49:33][352177396280497][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177396280497\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2534\"}'\'' -e'"" [2025-09-08 11:49:37][352177396280497][3800 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ee6b921-00e0-4427-a8ba-f3e002aa02a3","id":"QR_0ee6b921-00e0-4427-a8ba-f3e002aa02a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:49:37][352177396280497][3957 ms][DEBUG] proc_open done in 3576 ms; code=255; res.len=3343 [2025-09-08 11:49:37][352177396280497][3957 ms][DEBUG] END runCmdUntilRes#1 in 3576 ms [2025-09-08 11:49:37][352177396280497][3957 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:50:03][354516967485050][0 ms][INFO] === Request start === [2025-09-08 11:50:03][354516967485050][1 ms][DEBUG] START check_scloud [2025-09-08 11:50:03][354516967485050][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:50:04][354516967485050][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 15639 4972 24218592 160828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:50:04][354516967485050][317 ms][DEBUG] targetPkg: running [2025-09-08 11:50:04][354516967485050][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 11:50:04][354516967485050][318 ms][DEBUG] START check_boot_completed [2025-09-08 11:50:04][354516967485050][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:50:04][354516967485050][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:50:04][354516967485050][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:50:04][354516967485050][442 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 11:50:04][354516967485050][442 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 11:50:04][354516967485050][442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:50:04][354516967485050][598 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30721 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1006\nsuccessfulTxPacketsPerSecond: 2.66703739340082\nretriedTxPackets: 85\nretriedTxPacketsPerSecond: 0.22682622550185302\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 987\nsuccessfulRxPacketsPerSecond: 2.8024014312003134\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:50:04][354516967485050][598 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:50:05][354516967485050][1457 ms][DEBUG] SU: done in 859 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.159/201.159/201.159/0.000 ms\n [2025-09-08 11:50:05][354516967485050][1458 ms][DEBUG] check_internet: online [2025-09-08 11:50:05][354516967485050][1458 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:50:05][354516967485050][1458 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354516967485050\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5674\"}'\'' -e'"" [2025-09-08 11:50:05][354516967485050][1458 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:50:05][354516967485050][1458 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354516967485050\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5674\"}'\'' -e'"" [2025-09-08 11:50:08][354516967485050][4831 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_96f3081c-0306-40d4-8284-47e571ef4aee","id":"QR_96f3081c-0306-40d4-8284-47e571ef4aee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:50:08][354516967485050][4988 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-08 11:50:08][354516967485050][4988 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-08 11:50:08][354516967485050][4988 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:50:11][354516967485050][0 ms][INFO] === Request start === [2025-09-08 11:50:11][354516967485050][1 ms][DEBUG] START check_scloud [2025-09-08 11:50:11][354516967485050][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:50:11][354516967485050][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 15639 4972 24389800 172080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:50:11][354516967485050][317 ms][DEBUG] targetPkg: running [2025-09-08 11:50:11][354516967485050][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 11:50:11][354516967485050][317 ms][DEBUG] START check_boot_completed [2025-09-08 11:50:11][354516967485050][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:50:11][354516967485050][362 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 11:50:11][354516967485050][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:50:11][354516967485050][411 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 11:50:11][354516967485050][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 11:50:11][354516967485050][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:50:11][354516967485050][550 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30721 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1006\nsuccessfulTxPacketsPerSecond: 2.66703739340082\nretriedTxPackets: 85\nretriedTxPacketsPerSecond: 0.22682622550185302\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 987\nsuccessfulRxPacketsPerSecond: 2.8024014312003134\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:50:11][354516967485050][550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:50:12][354516967485050][831 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.541/197.541/197.541/0.000 ms\n [2025-09-08 11:50:12][354516967485050][831 ms][DEBUG] check_internet: online [2025-09-08 11:50:12][354516967485050][831 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:50:12][354516967485050][831 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354516967485050\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4387\"}'\'' -e'"" [2025-09-08 11:50:12][354516967485050][831 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:50:12][354516967485050][831 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354516967485050\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4387\"}'\'' -e'"" [2025-09-08 11:50:17][354516967485050][5689 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92f40452-0643-485d-b9e3-7b05a1a94bfb","id":"QR_92f40452-0643-485d-b9e3-7b05a1a94bfb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:50:17][354516967485050][5845 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-08 11:50:17][354516967485050][5845 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-08 11:50:17][354516967485050][5845 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:51:03][353310801291655][0 ms][INFO] === Request start === [2025-09-08 11:51:03][353310801291655][1 ms][DEBUG] START check_scloud [2025-09-08 11:51:03][353310801291655][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:51:04][353310801291655][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 15639 4972 24499432 183236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:51:04][353310801291655][256 ms][DEBUG] targetPkg: running [2025-09-08 11:51:04][353310801291655][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-08 11:51:04][353310801291655][256 ms][DEBUG] START check_boot_completed [2025-09-08 11:51:04][353310801291655][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:51:04][353310801291655][300 ms][DEBUG] ADB: done in 44 ms; out [2025-09-08 11:51:04][353310801291655][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:51:04][353310801291655][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:51:04][353310801291655][347 ms][DEBUG] END check_boot_completed in 91 ms [2025-09-08 11:51:04][353310801291655][347 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:51:04][353310801291655][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801291655\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8657\"}'\'' -e'"" [2025-09-08 11:51:04][353310801291655][347 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:51:04][353310801291655][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801291655\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8657\"}'\'' -e'"" [2025-09-08 11:51:08][353310801291655][4893 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee6f5469-4f30-42f6-b3de-816f847ac5c3","id":"QR_ee6f5469-4f30-42f6-b3de-816f847ac5c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:51:08][353310801291655][5049 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-08 11:51:08][353310801291655][5050 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-08 11:51:08][353310801291655][5050 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:51:11][353310801291655][0 ms][INFO] === Request start === [2025-09-08 11:51:11][353310801291655][1 ms][DEBUG] START check_scloud [2025-09-08 11:51:11][353310801291655][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:51:11][353310801291655][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 15639 4972 24670592 195216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:51:11][353310801291655][311 ms][DEBUG] targetPkg: running [2025-09-08 11:51:11][353310801291655][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 11:51:11][353310801291655][312 ms][DEBUG] START check_boot_completed [2025-09-08 11:51:11][353310801291655][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:51:11][353310801291655][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:51:11][353310801291655][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:51:11][353310801291655][421 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:51:11][353310801291655][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 11:51:11][353310801291655][421 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:51:11][353310801291655][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801291655\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9345\"}'\'' -e'"" [2025-09-08 11:51:11][353310801291655][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:51:11][353310801291655][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801291655\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9345\"}'\'' -e'"" [2025-09-08 11:51:16][353310801291655][5451 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1904c373-8950-44c3-9eda-9fa82d759bc7","id":"QR_1904c373-8950-44c3-9eda-9fa82d759bc7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:51:16][353310801291655][5607 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-08 11:51:16][353310801291655][5607 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-08 11:51:16][353310801291655][5607 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:54:03][351267960994002][1 ms][INFO] === Request start === [2025-09-08 11:54:03][351267960994002][1 ms][DEBUG] START check_scloud [2025-09-08 11:54:03][351267960994002][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:54:03][351267960994002][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 15639 4972 24818240 206428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:54:03][351267960994002][297 ms][DEBUG] targetPkg: running [2025-09-08 11:54:03][351267960994002][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-08 11:54:03][351267960994002][297 ms][DEBUG] START check_boot_completed [2025-09-08 11:54:03][351267960994002][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:54:03][351267960994002][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:54:03][351267960994002][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:54:03][351267960994002][390 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 11:54:03][351267960994002][391 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 11:54:03][351267960994002][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:54:03][351267960994002][531 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30721 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1284\nsuccessfulTxPacketsPerSecond: 0.9233518335840998\nretriedTxPackets: 148\nretriedTxPacketsPerSecond: 0.2092487968194183\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1232\nsuccessfulRxPacketsPerSecond: 0.8137453209644044\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:54:03][351267960994002][531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:54:04][351267960994002][876 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.281/239.281/239.281/0.000 ms\n [2025-09-08 11:54:04][351267960994002][876 ms][DEBUG] check_internet: online [2025-09-08 11:54:04][351267960994002][876 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:54:04][351267960994002][876 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267960994002\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3166\"}'\'' -e'"" [2025-09-08 11:54:04][351267960994002][876 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:54:04][351267960994002][876 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267960994002\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3166\"}'\'' -e'"" [2025-09-08 11:54:09][351267960994002][5639 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4434a1b-1ea5-457e-9ccb-1c2db977b6a5","id":"QR_f4434a1b-1ea5-457e-9ccb-1c2db977b6a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:54:09][351267960994002][5795 ms][DEBUG] proc_open done in 4919 ms; code=255; res.len=3343 [2025-09-08 11:54:09][351267960994002][5795 ms][DEBUG] END runCmdUntilRes#1 in 4919 ms [2025-09-08 11:54:09][351267960994002][5795 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:54:11][351267960994002][0 ms][INFO] === Request start === [2025-09-08 11:54:11][351267960994002][1 ms][DEBUG] START check_scloud [2025-09-08 11:54:11][351267960994002][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:54:11][351267960994002][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 15639 4972 24977224 217108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:54:11][351267960994002][303 ms][DEBUG] targetPkg: running [2025-09-08 11:54:11][351267960994002][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 11:54:11][351267960994002][303 ms][DEBUG] START check_boot_completed [2025-09-08 11:54:11][351267960994002][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:54:11][351267960994002][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 11:54:11][351267960994002][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:54:11][351267960994002][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:54:11][351267960994002][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 11:54:11][351267960994002][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 11:54:12][351267960994002][522 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30721 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1284\nsuccessfulTxPacketsPerSecond: 0.9233518335840998\nretriedTxPackets: 148\nretriedTxPacketsPerSecond: 0.2092487968194183\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1232\nsuccessfulRxPacketsPerSecond: 0.8137453209644044\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 11:54:12][351267960994002][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 11:54:12][351267960994002][850 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=195 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 195.558/195.558/195.558/0.000 ms\n [2025-09-08 11:54:12][351267960994002][850 ms][DEBUG] check_internet: online [2025-09-08 11:54:12][351267960994002][850 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:54:12][351267960994002][850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267960994002\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5666\"}'\'' -e'"" [2025-09-08 11:54:12][351267960994002][850 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:54:12][351267960994002][850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267960994002\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5666\"}'\'' -e'"" [2025-09-08 11:54:17][351267960994002][6161 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d41dc2a-9129-4d7c-93ab-58d1c7e4f487","id":"QR_3d41dc2a-9129-4d7c-93ab-58d1c7e4f487","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:54:17][351267960994002][6317 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-09-08 11:54:17][351267960994002][6317 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-09-08 11:54:17][351267960994002][6317 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:55:03][352674520632163][0 ms][INFO] === Request start === [2025-09-08 11:55:03][352674520632163][1 ms][DEBUG] START check_scloud [2025-09-08 11:55:03][352674520632163][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:55:03][352674520632163][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 15639 4972 25101192 229028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:55:03][352674520632163][257 ms][DEBUG] targetPkg: running [2025-09-08 11:55:03][352674520632163][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-08 11:55:03][352674520632163][257 ms][DEBUG] START check_boot_completed [2025-09-08 11:55:03][352674520632163][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:55:03][352674520632163][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:55:03][352674520632163][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:55:03][352674520632163][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 11:55:03][352674520632163][351 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 11:55:03][352674520632163][351 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:55:03][352674520632163][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520632163\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8525\"}'\'' -e'"" [2025-09-08 11:55:03][352674520632163][351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:55:03][352674520632163][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520632163\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8525\"}'\'' -e'"" [2025-09-08 11:55:07][352674520632163][3912 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6acb854e-688b-46cb-bd28-7c16c8fca427","id":"QR_6acb854e-688b-46cb-bd28-7c16c8fca427","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:55:07][352674520632163][4068 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=3343 [2025-09-08 11:55:07][352674520632163][4068 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-09-08 11:55:07][352674520632163][4068 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:55:09][352674520632163][0 ms][INFO] === Request start === [2025-09-08 11:55:09][352674520632163][1 ms][DEBUG] START check_scloud [2025-09-08 11:55:09][352674520632163][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:55:10][352674520632163][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 15639 4972 25251856 240800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:55:10][352674520632163][311 ms][DEBUG] targetPkg: running [2025-09-08 11:55:10][352674520632163][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 11:55:10][352674520632163][312 ms][DEBUG] START check_boot_completed [2025-09-08 11:55:10][352674520632163][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:55:10][352674520632163][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:55:10][352674520632163][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:55:10][352674520632163][452 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 11:55:10][352674520632163][452 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 11:55:10][352674520632163][452 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:55:10][352674520632163][452 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520632163\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4279\"}'\'' -e'"" [2025-09-08 11:55:10][352674520632163][452 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:55:10][352674520632163][452 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520632163\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4279\"}'\'' -e'"" [2025-09-08 11:55:14][352674520632163][4716 ms][DEBUG] proc_open done in 4264 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 11:55:14][352674520632163][4716 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-09-08 11:55:14][352674520632163][4716 ms][WARN] Detected error: Process with pid 15639 either refused to load frida-agent, or terminated during injectionProcess with pid 15639 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 11:55:14][352674520632163][4716 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 11:55:14][352674520632163][4966 ms][DEBUG] SU: done in 250 ms; outsystem 5397 4972 12709188 256092 ep_poll 0 S system_server\n [2025-09-08 11:55:14][352674520632163][4967 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 11:55:14][352674520632163][5107 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 11:55:14][352674520632163][5107 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 11:55:14][352674520632163][5107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 11:55:14][352674520632163][5279 ms][DEBUG] SU: done in 172 ms; out [2025-09-08 11:55:14][352674520632163][5279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 11:55:15][352674520632163][5482 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 11:55:17][352674520632163][7497 ms][DEBUG] START check_boot_completed [2025-09-08 11:55:17][352674520632163][7497 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:55:17][352674520632163][7544 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:55:17][352674520632163][7544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:55:17][352674520632163][7606 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:55:17][352674520632163][7607 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 11:55:20][352674520632163][10621 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 11:55:20][352674520632163][10621 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520632163\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4279\"}'\'' -e'"" [2025-09-08 11:55:25][352674520632163][15745 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_388b6437-e9f4-4514-aeed-6707767a7bb8","id":"QR_388b6437-e9f4-4514-aeed-6707767a7bb8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:55:25][352674520632163][15901 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-09-08 11:55:25][352674520632163][15901 ms][DEBUG] END runCmdUntilRes#2 in 5280 ms [2025-09-08 11:55:25][352674520632163][15901 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:57:03][352469853955970][1 ms][INFO] === Request start === [2025-09-08 11:57:03][352469853955970][1 ms][DEBUG] START check_scloud [2025-09-08 11:57:03][352469853955970][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:57:04][352469853955970][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 17333 4972 23706936 126044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:57:04][352469853955970][256 ms][DEBUG] targetPkg: running [2025-09-08 11:57:04][352469853955970][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-08 11:57:04][352469853955970][256 ms][DEBUG] START check_boot_completed [2025-09-08 11:57:04][352469853955970][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:57:04][352469853955970][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 11:57:04][352469853955970][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:57:04][352469853955970][365 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:57:04][352469853955970][365 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 11:57:04][352469853955970][365 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:57:04][352469853955970][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853955970\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7586\"}'\'' -e'"" [2025-09-08 11:57:04][352469853955970][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:57:04][352469853955970][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853955970\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7586\"}'\'' -e'"" [2025-09-08 11:57:09][352469853955970][5458 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a4f4272-56c7-4da6-9167-8d346430f092","id":"QR_2a4f4272-56c7-4da6-9167-8d346430f092","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:57:09][352469853955970][5614 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-08 11:57:09][352469853955970][5614 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-08 11:57:09][352469853955970][5614 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:57:11][352469853955970][0 ms][INFO] === Request start === [2025-09-08 11:57:11][352469853955970][1 ms][DEBUG] START check_scloud [2025-09-08 11:57:11][352469853955970][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:57:12][352469853955970][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 17333 4972 23834240 136868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:57:12][352469853955970][262 ms][DEBUG] targetPkg: running [2025-09-08 11:57:12][352469853955970][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-08 11:57:12][352469853955970][262 ms][DEBUG] START check_boot_completed [2025-09-08 11:57:12][352469853955970][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:57:12][352469853955970][309 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:57:12][352469853955970][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:57:12][352469853955970][371 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:57:12][352469853955970][371 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 11:57:12][352469853955970][371 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:57:12][352469853955970][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853955970\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4371\"}'\'' -e'"" [2025-09-08 11:57:12][352469853955970][371 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:57:12][352469853955970][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853955970\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4371\"}'\'' -e'"" [2025-09-08 11:57:17][352469853955970][5307 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_127746d7-c3dd-4dd8-91b6-8f2872f32ab4","id":"QR_127746d7-c3dd-4dd8-91b6-8f2872f32ab4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:57:17][352469853955970][5463 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-08 11:57:17][352469853955970][5464 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-08 11:57:17][352469853955970][5464 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:59:03][355478285724588][0 ms][INFO] === Request start === [2025-09-08 11:59:03][355478285724588][1 ms][DEBUG] START check_scloud [2025-09-08 11:59:03][355478285724588][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:59:03][355478285724588][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 17333 4972 23958260 149064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:59:03][355478285724588][307 ms][DEBUG] targetPkg: running [2025-09-08 11:59:03][355478285724588][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 11:59:03][355478285724588][307 ms][DEBUG] START check_boot_completed [2025-09-08 11:59:03][355478285724588][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:59:03][355478285724588][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:59:03][355478285724588][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:59:03][355478285724588][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:59:03][355478285724588][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 11:59:03][355478285724588][416 ms][DEBUG] rawBody.length=1150 [2025-09-08 11:59:03][355478285724588][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478285724588\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5345\"}'\'' -e'"" [2025-09-08 11:59:03][355478285724588][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:59:03][355478285724588][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478285724588\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5345\"}'\'' -e'"" [2025-09-08 11:59:09][355478285724588][6196 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_efacc6a2-aa4b-4e8b-99d0-e76752df3e83","id":"QR_efacc6a2-aa4b-4e8b-99d0-e76752df3e83","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:59:09][355478285724588][6352 ms][DEBUG] proc_open done in 5936 ms; code=255; res.len=3343 [2025-09-08 11:59:09][355478285724588][6352 ms][DEBUG] END runCmdUntilRes#1 in 5936 ms [2025-09-08 11:59:09][355478285724588][6352 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 11:59:11][355478285724588][1 ms][INFO] === Request start === [2025-09-08 11:59:11][355478285724588][1 ms][DEBUG] START check_scloud [2025-09-08 11:59:11][355478285724588][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 11:59:12][355478285724588][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 17333 4972 24133564 160076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 11:59:12][355478285724588][307 ms][DEBUG] targetPkg: running [2025-09-08 11:59:12][355478285724588][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 11:59:12][355478285724588][307 ms][DEBUG] START check_boot_completed [2025-09-08 11:59:12][355478285724588][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 11:59:12][355478285724588][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 11:59:12][355478285724588][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 11:59:12][355478285724588][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 11:59:12][355478285724588][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 11:59:12][355478285724588][417 ms][DEBUG] rawBody.length=1160 [2025-09-08 11:59:12][355478285724588][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478285724588\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8216\"}'\'' -e'"" [2025-09-08 11:59:12][355478285724588][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 11:59:12][355478285724588][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478285724588\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8216\"}'\'' -e'"" [2025-09-08 11:59:17][355478285724588][5712 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79308300-f6f3-408c-8621-5bb44f791d79","id":"QR_79308300-f6f3-408c-8621-5bb44f791d79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 11:59:17][355478285724588][5868 ms][DEBUG] proc_open done in 5451 ms; code=255; res.len=3343 [2025-09-08 11:59:17][355478285724588][5868 ms][DEBUG] END runCmdUntilRes#1 in 5451 ms [2025-09-08 11:59:17][355478285724588][5868 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:02:03][357635132002314][1 ms][INFO] === Request start === [2025-09-08 12:02:03][357635132002314][1 ms][DEBUG] START check_scloud [2025-09-08 12:02:03][357635132002314][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:02:03][357635132002314][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 17333 4972 24244312 171328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:02:03][357635132002314][308 ms][DEBUG] targetPkg: running [2025-09-08 12:02:03][357635132002314][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 12:02:03][357635132002314][308 ms][DEBUG] START check_boot_completed [2025-09-08 12:02:03][357635132002314][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:02:03][357635132002314][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:02:03][357635132002314][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:02:03][357635132002314][387 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 12:02:03][357635132002314][387 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 12:02:03][357635132002314][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:02:04][357635132002314][511 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30721 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1575\nsuccessfulTxPacketsPerSecond: 0.5811286129377581\nretriedTxPackets: 225\nretriedTxPacketsPerSecond: 0.1529285823520416\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1481\nsuccessfulRxPacketsPerSecond: 0.5046643217617373\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:02:04][357635132002314][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:02:05][357635132002314][1980 ms][DEBUG] SU: done in 1469 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.083/204.083/204.083/0.000 ms\n [2025-09-08 12:02:05][357635132002314][1981 ms][DEBUG] check_internet: online [2025-09-08 12:02:05][357635132002314][1981 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:02:05][357635132002314][1981 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357635132002314\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5245\"}'\'' -e'"" [2025-09-08 12:02:05][357635132002314][1981 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:02:05][357635132002314][1981 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357635132002314\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5245\"}'\'' -e'"" [2025-09-08 12:02:09][357635132002314][6103 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_19083c8b-d145-4a93-9175-0638640b525c","id":"QR_19083c8b-d145-4a93-9175-0638640b525c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:02:09][357635132002314][6260 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-09-08 12:02:09][357635132002314][6260 ms][DEBUG] END runCmdUntilRes#1 in 4279 ms [2025-09-08 12:02:09][357635132002314][6260 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:02:12][357635132002314][0 ms][INFO] === Request start === [2025-09-08 12:02:12][357635132002314][1 ms][DEBUG] START check_scloud [2025-09-08 12:02:12][357635132002314][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:02:12][357635132002314][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 17333 4972 24374624 183188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:02:12][357635132002314][317 ms][DEBUG] targetPkg: running [2025-09-08 12:02:12][357635132002314][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 12:02:12][357635132002314][317 ms][DEBUG] START check_boot_completed [2025-09-08 12:02:12][357635132002314][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:02:12][357635132002314][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:02:12][357635132002314][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:02:12][357635132002314][457 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 12:02:12][357635132002314][457 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 12:02:12][357635132002314][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:02:12][357635132002314][566 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30721 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1575\nsuccessfulTxPacketsPerSecond: 0.5811286129377581\nretriedTxPackets: 225\nretriedTxPacketsPerSecond: 0.1529285823520416\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1481\nsuccessfulRxPacketsPerSecond: 0.5046643217617373\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:02:12][357635132002314][567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:02:13][357635132002314][941 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=278 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 278.293/278.293/278.293/0.000 ms\n [2025-09-08 12:02:13][357635132002314][941 ms][DEBUG] check_internet: online [2025-09-08 12:02:13][357635132002314][941 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:02:13][357635132002314][941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357635132002314\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5980\"}'\'' -e'"" [2025-09-08 12:02:13][357635132002314][941 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:02:13][357635132002314][941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357635132002314\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5980\"}'\'' -e'"" [2025-09-08 12:02:18][357635132002314][6096 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4bbc2ec-e4da-4f7b-a3d8-b7df564618b0","id":"QR_b4bbc2ec-e4da-4f7b-a3d8-b7df564618b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:02:18][357635132002314][6252 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 12:02:18][357635132002314][6253 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 12:02:18][357635132002314][6253 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:05:30][359484880240141][1 ms][INFO] === Request start === [2025-09-08 12:05:30][359484880240141][1 ms][DEBUG] START check_scloud [2025-09-08 12:05:30][359484880240141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:05:30][359484880240141][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 17333 4972 24490528 194048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:05:30][359484880240141][299 ms][DEBUG] targetPkg: running [2025-09-08 12:05:30][359484880240141][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 12:05:30][359484880240141][299 ms][DEBUG] START check_boot_completed [2025-09-08 12:05:30][359484880240141][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:05:30][359484880240141][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:05:30][359484880240141][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:05:30][359484880240141][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:05:30][359484880240141][393 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 12:05:30][359484880240141][393 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:05:30][359484880240141][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484880240141\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3966\"}'\'' -e'"" [2025-09-08 12:05:30][359484880240141][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:05:30][359484880240141][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484880240141\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3966\"}'\'' -e'"" [2025-09-08 12:05:35][359484880240141][4563 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-08 12:05:35][359484880240141][4719 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=93 [2025-09-08 12:05:35][359484880240141][4720 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-09-08 12:05:35][359484880240141][4720 ms][INFO] SUCCESS response from frida (len=93) [2025-09-08 12:05:35][][0 ms][INFO] === Request start === [2025-09-08 12:05:35][][1 ms][DEBUG] START check_scloud [2025-09-08 12:05:35][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:05:35][][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 17333 4972 24659624 205784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:05:35][][308 ms][DEBUG] targetPkg: running [2025-09-08 12:05:35][][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 12:05:35][][309 ms][DEBUG] START check_boot_completed [2025-09-08 12:05:35][][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:05:35][][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:05:35][][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:05:35][][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:05:35][][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:05:35][][402 ms][DEBUG] rawBody.length=1131 [2025-09-08 12:05:35][][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX90XJEKP\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5969\"}'\'' -e'"" [2025-09-08 12:05:35][][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:05:35][][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX90XJEKP\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5969\"}'\'' -e'"" [2025-09-08 12:05:38][][3448 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 12:05:39][][3604 ms][DEBUG] proc_open done in 3202 ms; code=255; res.len=107 [2025-09-08 12:05:39][][3604 ms][DEBUG] END runCmdUntilRes#1 in 3202 ms [2025-09-08 12:05:39][][3604 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 12:05:40][359484880240141][0 ms][INFO] === Request start === [2025-09-08 12:05:40][359484880240141][1 ms][DEBUG] START check_scloud [2025-09-08 12:05:40][359484880240141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:05:41][359484880240141][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 17333 4972 24787568 216136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:05:41][359484880240141][313 ms][DEBUG] targetPkg: running [2025-09-08 12:05:41][359484880240141][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 12:05:41][359484880240141][314 ms][DEBUG] START check_boot_completed [2025-09-08 12:05:41][359484880240141][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:05:41][359484880240141][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:05:41][359484880240141][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:05:41][359484880240141][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:05:41][359484880240141][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:05:41][359484880240141][407 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:05:41][359484880240141][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484880240141\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1674\"}'\'' -e'"" [2025-09-08 12:05:41][359484880240141][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:05:41][359484880240141][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484880240141\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1674\"}'\'' -e'"" [2025-09-08 12:05:45][359484880240141][4671 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 12:05:45][359484880240141][4828 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=107 [2025-09-08 12:05:45][359484880240141][4828 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-09-08 12:05:45][359484880240141][4828 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 12:05:45][][0 ms][INFO] === Request start === [2025-09-08 12:05:45][][1 ms][DEBUG] START check_scloud [2025-09-08 12:05:45][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:05:46][][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 17333 4972 24938232 227756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:05:46][][318 ms][DEBUG] targetPkg: running [2025-09-08 12:05:46][][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 12:05:46][][318 ms][DEBUG] START check_boot_completed [2025-09-08 12:05:46][][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:05:46][][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:05:46][][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:05:46][][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:05:46][][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:05:46][][412 ms][DEBUG] rawBody.length=1141 [2025-09-08 12:05:46][][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX90XJEKP\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3671\"}'\'' -e'"" [2025-09-08 12:05:46][][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:05:46][][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX90XJEKP\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3671\"}'\'' -e'"" [2025-09-08 12:05:49][][4020 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 12:05:49][][4176 ms][DEBUG] proc_open done in 3765 ms; code=255; res.len=107 [2025-09-08 12:05:49][][4176 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-09-08 12:05:49][][4176 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 12:07:30][357211244416295][0 ms][INFO] === Request start === [2025-09-08 12:07:30][357211244416295][1 ms][DEBUG] START check_scloud [2025-09-08 12:07:30][357211244416295][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:07:30][357211244416295][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 17333 4972 25034996 238652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:07:30][357211244416295][263 ms][DEBUG] targetPkg: running [2025-09-08 12:07:30][357211244416295][263 ms][DEBUG] END check_scloud in 263 ms [2025-09-08 12:07:30][357211244416295][263 ms][DEBUG] START check_boot_completed [2025-09-08 12:07:30][357211244416295][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:07:30][357211244416295][310 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:07:30][357211244416295][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:07:30][357211244416295][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:07:30][357211244416295][357 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:07:30][357211244416295][357 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:07:30][357211244416295][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211244416295\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1685\"}'\'' -e'"" [2025-09-08 12:07:30][357211244416295][357 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:07:30][357211244416295][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211244416295\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1685\"}'\'' -e'"" [2025-09-08 12:07:34][357211244416295][4325 ms][DEBUG] proc_open done in 3968 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 12:07:34][357211244416295][4325 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-09-08 12:07:34][357211244416295][4325 ms][WARN] Detected error: Process with pid 17333 either refused to load frida-agent, or terminated during injectionProcess with pid 17333 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 12:07:34][357211244416295][4325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 12:07:34][357211244416295][4590 ms][DEBUG] SU: done in 265 ms; outsystem 5397 4972 12833844 267964 ep_poll 0 S system_server\nsystem 18676 1 12633220 116956 ptrace_stop 0 t system_server\n [2025-09-08 12:07:34][357211244416295][4590 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 12:07:34][357211244416295][4746 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 12:07:34][357211244416295][4746 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 12:07:34][357211244416295][4746 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 12:07:34][357211244416295][4872 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 12:07:34][357211244416295][4872 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 12:07:35][357211244416295][5043 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 12:07:37][357211244416295][7058 ms][DEBUG] START check_boot_completed [2025-09-08 12:07:37][357211244416295][7058 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:07:37][357211244416295][7105 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:07:37][357211244416295][7105 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:07:37][357211244416295][7152 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:07:37][357211244416295][7152 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 12:07:40][357211244416295][10167 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 12:07:40][357211244416295][10167 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211244416295\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1685\"}'\'' -e'"" [2025-09-08 12:07:40][357211244416295][10651 ms][DEBUG] proc_open done in 484 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-08 12:07:40][357211244416295][10652 ms][DEBUG] END runCmdUntilRes#2 in 485 ms [2025-09-08 12:07:40][357211244416295][10652 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-08 12:07:40][357211244416295][10652 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 12:07:41][357211244416295][10933 ms][DEBUG] SU: done in 281 ms; out [2025-09-08 12:08:29][357211244416295][1 ms][INFO] === Request start === [2025-09-08 12:08:29][357211244416295][1 ms][DEBUG] START check_scloud [2025-09-08 12:08:29][357211244416295][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:08:30][357211244416295][410 ms][DEBUG] SU: done in 409 ms; out [2025-09-08 12:08:30][357211244416295][410 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 12:08:30][357211244416295][457 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 12:08:30][357211244416295][457 ms][DEBUG] check_devices: device found [2025-09-08 12:08:30][357211244416295][457 ms][WARN] targetPkg: not running, restarting [2025-09-08 12:08:30][357211244416295][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 12:08:30][357211244416295][613 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 12:08:30][357211244416295][613 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 12:08:30][357211244416295][863 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 12:08:32][357211244416295][2878 ms][DEBUG] END check_scloud in 2877 ms [2025-09-08 12:08:32][357211244416295][2878 ms][DEBUG] START check_boot_completed [2025-09-08 12:08:32][357211244416295][2878 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:08:32][357211244416295][2925 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:08:32][357211244416295][2925 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:08:32][357211244416295][2987 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:08:32][357211244416295][2988 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 12:08:32][357211244416295][2988 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:08:33][357211244416295][3192 ms][DEBUG] SU: done in 204 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 214\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 19\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 192\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:08:33][357211244416295][3192 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:08:33][357211244416295][3925 ms][DEBUG] SU: done in 733 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.858/156.858/156.858/0.000 ms\n [2025-09-08 12:08:33][357211244416295][3925 ms][DEBUG] check_internet: online [2025-09-08 12:08:33][357211244416295][3925 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:08:33][357211244416295][3925 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211244416295\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6771\"}'\'' -e'"" [2025-09-08 12:08:33][357211244416295][3925 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:08:33][357211244416295][3925 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211244416295\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6771\"}'\'' -e'"" [2025-09-08 12:08:38][357211244416295][8845 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 12:08:38][357211244416295][9001 ms][DEBUG] proc_open done in 5076 ms; code=255; res.len=107 [2025-09-08 12:08:38][357211244416295][9002 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-08 12:08:38][357211244416295][9002 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 12:08:39][][0 ms][INFO] === Request start === [2025-09-08 12:08:39][][1 ms][DEBUG] START check_scloud [2025-09-08 12:08:39][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:08:39][][355 ms][DEBUG] SU: done in 354 ms; outu0_a118 23791 18958 23841252 124336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:08:39][][355 ms][DEBUG] targetPkg: running [2025-09-08 12:08:39][][355 ms][DEBUG] END check_scloud in 355 ms [2025-09-08 12:08:39][][355 ms][DEBUG] START check_boot_completed [2025-09-08 12:08:39][][355 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:08:39][][386 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:08:39][][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:08:39][][433 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:08:39][][433 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:08:39][][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:08:39][][543 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 214\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 19\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 192\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:08:39][][543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:08:39][][824 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=157 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 157.315/157.315/157.315/0.000 ms\n [2025-09-08 12:08:39][][824 ms][DEBUG] check_internet: online [2025-09-08 12:08:39][][824 ms][DEBUG] rawBody.length=1131 [2025-09-08 12:08:39][][824 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T90E29RB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2766\"}'\'' -e'"" [2025-09-08 12:08:39][][824 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:08:39][][824 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T90E29RB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2766\"}'\'' -e'"" [2025-09-08 12:08:43][][4198 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-08 12:08:43][][4354 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=95 [2025-09-08 12:08:43][][4354 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-08 12:08:43][][4354 ms][INFO] SUCCESS response from frida (len=95) [2025-09-08 12:08:45][357211244416295][0 ms][INFO] === Request start === [2025-09-08 12:08:45][357211244416295][1 ms][DEBUG] START check_scloud [2025-09-08 12:08:45][357211244416295][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:08:45][357211244416295][345 ms][DEBUG] SU: done in 344 ms; outu0_a118 23791 18958 24027848 119344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:08:45][357211244416295][345 ms][DEBUG] targetPkg: running [2025-09-08 12:08:45][357211244416295][345 ms][DEBUG] END check_scloud in 344 ms [2025-09-08 12:08:45][357211244416295][345 ms][DEBUG] START check_boot_completed [2025-09-08 12:08:45][357211244416295][345 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:08:45][357211244416295][391 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:08:45][357211244416295][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:08:45][357211244416295][454 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:08:45][357211244416295][454 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:08:45][357211244416295][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:08:45][357211244416295][641 ms][DEBUG] SU: done in 187 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 214\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 19\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 192\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:08:45][357211244416295][642 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:08:46][357211244416295][1048 ms][DEBUG] SU: done in 406 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=275 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 275.721/275.721/275.721/0.000 ms\n [2025-09-08 12:08:46][357211244416295][1048 ms][DEBUG] check_internet: online [2025-09-08 12:08:46][357211244416295][1048 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:08:46][357211244416295][1048 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211244416295\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2063\"}'\'' -e'"" [2025-09-08 12:08:46][357211244416295][1048 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:08:46][357211244416295][1048 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211244416295\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2063\"}'\'' -e'"" [2025-09-08 12:08:51][357211244416295][6749 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a589be1-0553-4007-8440-b3afca768326","id":"QR_2a589be1-0553-4007-8440-b3afca768326","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:08:52][357211244416295][6905 ms][DEBUG] proc_open done in 5857 ms; code=255; res.len=3343 [2025-09-08 12:08:52][357211244416295][6905 ms][DEBUG] END runCmdUntilRes#1 in 5858 ms [2025-09-08 12:08:52][357211244416295][6906 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:09:31][359484880240141][0 ms][INFO] === Request start === [2025-09-08 12:09:31][359484880240141][1 ms][DEBUG] START check_scloud [2025-09-08 12:09:31][359484880240141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:09:31][359484880240141][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 23791 18958 24062592 60428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:09:31][359484880240141][318 ms][DEBUG] targetPkg: running [2025-09-08 12:09:31][359484880240141][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 12:09:31][359484880240141][318 ms][DEBUG] START check_boot_completed [2025-09-08 12:09:31][359484880240141][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:09:31][359484880240141][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:09:31][359484880240141][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:09:31][359484880240141][427 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 12:09:31][359484880240141][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:09:31][359484880240141][427 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:09:31][359484880240141][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484880240141\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6740\"}'\'' -e'"" [2025-09-08 12:09:31][359484880240141][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:09:31][359484880240141][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484880240141\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6740\"}'\'' -e'"" [2025-09-08 12:09:35][359484880240141][4661 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-08 12:09:35][359484880240141][4817 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=93 [2025-09-08 12:09:35][359484880240141][4817 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-08 12:09:35][359484880240141][4817 ms][INFO] SUCCESS response from frida (len=93) [2025-09-08 12:09:36][][0 ms][INFO] === Request start === [2025-09-08 12:09:36][][1 ms][DEBUG] START check_scloud [2025-09-08 12:09:36][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:09:36][][324 ms][DEBUG] SU: done in 324 ms; outu0_a118 23791 18958 24242112 82092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:09:36][][325 ms][DEBUG] targetPkg: running [2025-09-08 12:09:36][][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 12:09:36][][325 ms][DEBUG] START check_boot_completed [2025-09-08 12:09:36][][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:09:36][][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:09:36][][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:09:36][][434 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:09:36][][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:09:36][][434 ms][DEBUG] rawBody.length=1131 [2025-09-08 12:09:36][][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX90XJEKP\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6150\"}'\'' -e'"" [2025-09-08 12:09:36][][434 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:09:36][][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX90XJEKP\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6150\"}'\'' -e'"" [2025-09-08 12:09:39][][3839 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 12:09:40][][3995 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=107 [2025-09-08 12:09:40][][3995 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-09-08 12:09:40][][3995 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 12:09:41][359484880240141][0 ms][INFO] === Request start === [2025-09-08 12:09:41][359484880240141][1 ms][DEBUG] START check_scloud [2025-09-08 12:09:41][359484880240141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:09:42][359484880240141][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 23791 18958 24378440 93796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:09:42][359484880240141][328 ms][DEBUG] targetPkg: running [2025-09-08 12:09:42][359484880240141][328 ms][DEBUG] END check_scloud in 327 ms [2025-09-08 12:09:42][359484880240141][328 ms][DEBUG] START check_boot_completed [2025-09-08 12:09:42][359484880240141][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:09:42][359484880240141][374 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:09:42][359484880240141][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:09:42][359484880240141][423 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 12:09:42][359484880240141][423 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 12:09:42][359484880240141][423 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:09:42][359484880240141][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484880240141\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7822\"}'\'' -e'"" [2025-09-08 12:09:42][359484880240141][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:09:42][359484880240141][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484880240141\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7822\"}'\'' -e'"" [2025-09-08 12:09:45][359484880240141][4014 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 12:09:45][359484880240141][4170 ms][DEBUG] proc_open done in 3747 ms; code=255; res.len=107 [2025-09-08 12:09:45][359484880240141][4170 ms][DEBUG] END runCmdUntilRes#1 in 3747 ms [2025-09-08 12:09:45][359484880240141][4170 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 12:09:46][][0 ms][INFO] === Request start === [2025-09-08 12:09:46][][1 ms][DEBUG] START check_scloud [2025-09-08 12:09:46][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:09:46][][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 23791 18958 24518864 105600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:09:46][][310 ms][DEBUG] targetPkg: running [2025-09-08 12:09:46][][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 12:09:46][][310 ms][DEBUG] START check_boot_completed [2025-09-08 12:09:46][][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:09:46][][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:09:46][][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:09:46][][419 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 12:09:46][][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:09:46][][419 ms][DEBUG] rawBody.length=1141 [2025-09-08 12:09:46][][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX90XJEKP\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7759\"}'\'' -e'"" [2025-09-08 12:09:46][][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:09:46][][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX90XJEKP\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7759\"}'\'' -e'"" [2025-09-08 12:09:50][][3887 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 12:09:50][][4043 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=107 [2025-09-08 12:09:50][][4043 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-08 12:09:50][][4043 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 12:11:05][353600814563847][1 ms][INFO] === Request start === [2025-09-08 12:11:05][353600814563847][1 ms][DEBUG] START check_scloud [2025-09-08 12:11:05][353600814563847][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:11:05][353600814563847][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 23791 18958 24568060 120200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:11:05][353600814563847][303 ms][DEBUG] targetPkg: running [2025-09-08 12:11:05][353600814563847][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 12:11:05][353600814563847][304 ms][DEBUG] START check_boot_completed [2025-09-08 12:11:05][353600814563847][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:11:05][353600814563847][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:11:05][353600814563847][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:11:05][353600814563847][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:11:05][353600814563847][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:11:05][353600814563847][397 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:11:05][353600814563847][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600814563847\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1699\"}'\'' -e'"" [2025-09-08 12:11:05][353600814563847][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:11:05][353600814563847][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600814563847\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1699\"}'\'' -e'"" [2025-09-08 12:11:11][353600814563847][6161 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28d8cb61-fdc8-43dc-84d5-018ca2607804","id":"QR_28d8cb61-fdc8-43dc-84d5-018ca2607804","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:11:11][353600814563847][6317 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-09-08 12:11:11][353600814563847][6317 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-09-08 12:11:11][353600814563847][6318 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:11:14][353600814563847][0 ms][INFO] === Request start === [2025-09-08 12:11:15][353600814563847][1 ms][DEBUG] START check_scloud [2025-09-08 12:11:15][353600814563847][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:11:15][353600814563847][264 ms][DEBUG] SU: done in 264 ms; outu0_a118 23791 18958 24738820 130708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:11:15][353600814563847][265 ms][DEBUG] targetPkg: running [2025-09-08 12:11:15][353600814563847][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-08 12:11:15][353600814563847][265 ms][DEBUG] START check_boot_completed [2025-09-08 12:11:15][353600814563847][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:11:15][353600814563847][311 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:11:15][353600814563847][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:11:15][353600814563847][374 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:11:15][353600814563847][374 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:11:15][353600814563847][374 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:11:15][353600814563847][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600814563847\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5521\"}'\'' -e'"" [2025-09-08 12:11:15][353600814563847][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:11:15][353600814563847][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600814563847\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5521\"}'\'' -e'"" [2025-09-08 12:11:19][353600814563847][4544 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2fe7e04b-5ae3-4f1f-aea2-a824574e0725","id":"QR_2fe7e04b-5ae3-4f1f-aea2-a824574e0725","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:11:19][353600814563847][4701 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-09-08 12:11:19][353600814563847][4701 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-09-08 12:11:19][353600814563847][4701 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:12:03][355016404805282][0 ms][INFO] === Request start === [2025-09-08 12:12:03][355016404805282][1 ms][DEBUG] START check_scloud [2025-09-08 12:12:03][355016404805282][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:12:04][355016404805282][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 23791 18958 24862916 141540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:12:04][355016404805282][257 ms][DEBUG] targetPkg: running [2025-09-08 12:12:04][355016404805282][257 ms][DEBUG] END check_scloud in 257 ms [2025-09-08 12:12:04][355016404805282][257 ms][DEBUG] START check_boot_completed [2025-09-08 12:12:04][355016404805282][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:12:04][355016404805282][288 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:12:04][355016404805282][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:12:04][355016404805282][335 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:12:04][355016404805282][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:12:04][355016404805282][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:12:04][355016404805282][461 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 690\nsuccessfulTxPacketsPerSecond: 6.851546088228372\nretriedTxPackets: 103\nretriedTxPacketsPerSecond: 1.844336715247399\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 718\nsuccessfulRxPacketsPerSecond: 6.25725267872009\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:12:04][355016404805282][461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:12:04][355016404805282][835 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.385/251.385/251.385/0.000 ms\n [2025-09-08 12:12:04][355016404805282][835 ms][DEBUG] check_internet: online [2025-09-08 12:12:04][355016404805282][835 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:12:04][355016404805282][836 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355016404805282\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7316\"}'\'' -e'"" [2025-09-08 12:12:04][355016404805282][836 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:12:04][355016404805282][836 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355016404805282\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7316\"}'\'' -e'"" [2025-09-08 12:12:07][355016404805282][4131 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73efc8a2-abff-4e23-8137-200c01167006","id":"QR_73efc8a2-abff-4e23-8137-200c01167006","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:12:08][355016404805282][4287 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-08 12:12:08][355016404805282][4287 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-08 12:12:08][355016404805282][4287 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:12:10][355016404805282][0 ms][INFO] === Request start === [2025-09-08 12:12:10][355016404805282][1 ms][DEBUG] START check_scloud [2025-09-08 12:12:10][355016404805282][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:12:10][355016404805282][274 ms][DEBUG] SU: done in 274 ms; outu0_a118 23791 18958 25013708 152944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:12:10][355016404805282][275 ms][DEBUG] targetPkg: running [2025-09-08 12:12:10][355016404805282][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-08 12:12:10][355016404805282][275 ms][DEBUG] START check_boot_completed [2025-09-08 12:12:10][355016404805282][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:12:10][355016404805282][321 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:12:10][355016404805282][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:12:10][355016404805282][384 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:12:10][355016404805282][384 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:12:10][355016404805282][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:12:10][355016404805282][493 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 690\nsuccessfulTxPacketsPerSecond: 6.851546088228372\nretriedTxPackets: 103\nretriedTxPacketsPerSecond: 1.844336715247399\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 718\nsuccessfulRxPacketsPerSecond: 6.25725267872009\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:12:10][355016404805282][494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:12:11][355016404805282][884 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.789/248.789/248.789/0.000 ms\n [2025-09-08 12:12:11][355016404805282][884 ms][DEBUG] check_internet: online [2025-09-08 12:12:11][355016404805282][884 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:12:11][355016404805282][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355016404805282\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4644\"}'\'' -e'"" [2025-09-08 12:12:11][355016404805282][884 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:12:11][355016404805282][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355016404805282\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4644\"}'\'' -e'"" [2025-09-08 12:12:16][355016404805282][6538 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed49fe47-6d0b-4b9c-843f-3e8ae4075b49","id":"QR_ed49fe47-6d0b-4b9c-843f-3e8ae4075b49","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:12:17][355016404805282][6695 ms][DEBUG] proc_open done in 5810 ms; code=255; res.len=3343 [2025-09-08 12:12:17][355016404805282][6695 ms][DEBUG] END runCmdUntilRes#1 in 5810 ms [2025-09-08 12:12:17][355016404805282][6695 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:13:03][353196396799669][0 ms][INFO] === Request start === [2025-09-08 12:13:03][353196396799669][1 ms][DEBUG] START check_scloud [2025-09-08 12:13:03][353196396799669][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:13:03][353196396799669][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 23791 18958 25156240 163864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:13:03][353196396799669][249 ms][DEBUG] targetPkg: running [2025-09-08 12:13:03][353196396799669][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-08 12:13:03][353196396799669][249 ms][DEBUG] START check_boot_completed [2025-09-08 12:13:03][353196396799669][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:13:03][353196396799669][280 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:13:03][353196396799669][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:13:04][353196396799669][327 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:13:04][353196396799669][327 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:13:04][353196396799669][327 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:13:04][353196396799669][327 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196396799669\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4378\"}'\'' -e'"" [2025-09-08 12:13:04][353196396799669][327 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:13:04][353196396799669][327 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196396799669\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4378\"}'\'' -e'"" [2025-09-08 12:13:08][353196396799669][4623 ms][DEBUG] proc_open done in 4296 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 12:13:08][353196396799669][4623 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-09-08 12:13:08][353196396799669][4623 ms][WARN] Detected error: Process with pid 23791 either refused to load frida-agent, or terminated during injectionProcess with pid 23791 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 12:13:08][353196396799669][4623 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 12:13:08][353196396799669][4920 ms][DEBUG] SU: done in 297 ms; outsystem 19215 18958 13100956 573108 ep_poll 0 S system_server\n [2025-09-08 12:13:08][353196396799669][4920 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 12:13:08][353196396799669][5060 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 12:13:08][353196396799669][5060 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 12:13:08][353196396799669][5061 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 12:13:08][353196396799669][5185 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 12:13:08][353196396799669][5185 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 12:13:09][353196396799669][5341 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 12:13:11][353196396799669][7356 ms][DEBUG] START check_boot_completed [2025-09-08 12:13:11][353196396799669][7357 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:13:11][353196396799669][7404 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:13:11][353196396799669][7404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:13:11][353196396799669][7466 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:13:11][353196396799669][7466 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:13:14][353196396799669][10481 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 12:13:14][353196396799669][10481 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196396799669\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4378\"}'\'' -e'"" [2025-09-08 12:13:17][353196396799669][14089 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dfbeec3b-52c3-4b9e-b025-daaafb1869a1","id":"QR_dfbeec3b-52c3-4b9e-b025-daaafb1869a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:13:17][353196396799669][14246 ms][DEBUG] proc_open done in 3765 ms; code=255; res.len=3343 [2025-09-08 12:13:17][353196396799669][14246 ms][DEBUG] END runCmdUntilRes#2 in 3765 ms [2025-09-08 12:13:17][353196396799669][14246 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:13:20][353196396799669][1 ms][INFO] === Request start === [2025-09-08 12:13:20][353196396799669][1 ms][DEBUG] START check_scloud [2025-09-08 12:13:20][353196396799669][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:13:20][353196396799669][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 31924 18958 23805152 124936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:13:20][353196396799669][302 ms][DEBUG] targetPkg: running [2025-09-08 12:13:20][353196396799669][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 12:13:20][353196396799669][302 ms][DEBUG] START check_boot_completed [2025-09-08 12:13:20][353196396799669][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:13:20][353196396799669][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:13:20][353196396799669][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:13:20][353196396799669][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:13:20][353196396799669][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:13:20][353196396799669][395 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:13:20][353196396799669][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196396799669\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1249\"}'\'' -e'"" [2025-09-08 12:13:20][353196396799669][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:13:20][353196396799669][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196396799669\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1249\"}'\'' -e'"" [2025-09-08 12:13:25][353196396799669][5675 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e0d595c-3fb2-41d1-afc4-50fae21f1734","id":"QR_7e0d595c-3fb2-41d1-afc4-50fae21f1734","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:13:26][353196396799669][5831 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-09-08 12:13:26][353196396799669][5831 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-08 12:13:26][353196396799669][5832 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:13:30][351104342386336][0 ms][INFO] === Request start === [2025-09-08 12:13:30][351104342386336][1 ms][DEBUG] START check_scloud [2025-09-08 12:13:30][351104342386336][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:13:30][351104342386336][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 31924 18958 24009140 138328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:13:30][351104342386336][247 ms][DEBUG] targetPkg: running [2025-09-08 12:13:30][351104342386336][247 ms][DEBUG] END check_scloud in 246 ms [2025-09-08 12:13:30][351104342386336][247 ms][DEBUG] START check_boot_completed [2025-09-08 12:13:30][351104342386336][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:13:30][351104342386336][293 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:13:30][351104342386336][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:13:30][351104342386336][340 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:13:30][351104342386336][340 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:13:30][351104342386336][340 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:13:30][351104342386336][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104342386336\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3673\"}'\'' -e'"" [2025-09-08 12:13:30][351104342386336][340 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:13:30][351104342386336][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104342386336\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3673\"}'\'' -e'"" [2025-09-08 12:13:33][351104342386336][3652 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dcf8f309-fec8-4f4f-91f3-dce722662fa7","id":"QR_dcf8f309-fec8-4f4f-91f3-dce722662fa7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:13:34][351104342386336][3808 ms][DEBUG] proc_open done in 3468 ms; code=255; res.len=3343 [2025-09-08 12:13:34][351104342386336][3808 ms][DEBUG] END runCmdUntilRes#1 in 3468 ms [2025-09-08 12:13:34][351104342386336][3808 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:13:36][351104342386336][0 ms][INFO] === Request start === [2025-09-08 12:13:36][351104342386336][1 ms][DEBUG] START check_scloud [2025-09-08 12:13:36][351104342386336][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:13:36][351104342386336][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 31924 18958 24167184 150184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:13:36][351104342386336][299 ms][DEBUG] targetPkg: running [2025-09-08 12:13:36][351104342386336][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 12:13:36][351104342386336][299 ms][DEBUG] START check_boot_completed [2025-09-08 12:13:36][351104342386336][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:13:36][351104342386336][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:13:36][351104342386336][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:13:36][351104342386336][393 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 12:13:36][351104342386336][393 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 12:13:36][351104342386336][393 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:13:36][351104342386336][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104342386336\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2762\"}'\'' -e'"" [2025-09-08 12:13:36][351104342386336][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:13:36][351104342386336][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104342386336\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2762\"}'\'' -e'"" [2025-09-08 12:13:41][351104342386336][4923 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bec0935b-c0c4-4d15-a795-d6196f3e73f0","id":"QR_bec0935b-c0c4-4d15-a795-d6196f3e73f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:13:41][351104342386336][5079 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-08 12:13:41][351104342386336][5079 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-08 12:13:41][351104342386336][5079 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:14:04][358780109816095][0 ms][INFO] === Request start === [2025-09-08 12:14:04][358780109816095][1 ms][DEBUG] START check_scloud [2025-09-08 12:14:04][358780109816095][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:14:04][358780109816095][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 31924 18958 24228348 161772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:14:04][358780109816095][328 ms][DEBUG] targetPkg: running [2025-09-08 12:14:04][358780109816095][328 ms][DEBUG] END check_scloud in 327 ms [2025-09-08 12:14:04][358780109816095][328 ms][DEBUG] START check_boot_completed [2025-09-08 12:14:04][358780109816095][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:14:04][358780109816095][375 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:14:04][358780109816095][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:14:05][358780109816095][437 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:14:05][358780109816095][437 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:14:05][358780109816095][437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:14:05][358780109816095][562 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1043\nsuccessfulTxPacketsPerSecond: 1.6272905382044485\nretriedTxPackets: 187\nretriedTxPacketsPerSecond: 0.3872306096577158\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1024\nsuccessfulRxPacketsPerSecond: 1.4106257923245362\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:14:05][358780109816095][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:14:06][358780109816095][2249 ms][DEBUG] SU: done in 1687 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.317/199.317/199.317/0.000 ms\n [2025-09-08 12:14:06][358780109816095][2250 ms][DEBUG] check_internet: online [2025-09-08 12:14:06][358780109816095][2250 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:14:06][358780109816095][2250 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780109816095\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XEF\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2518\"}'\'' -e'"" [2025-09-08 12:14:06][358780109816095][2250 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:14:06][358780109816095][2250 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780109816095\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XEF\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2518\"}'\'' -e'"" [2025-09-08 12:14:10][358780109816095][5670 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f5bba879-2704-4d39-a505-089259b75b39","id":"QR_f5bba879-2704-4d39-a505-089259b75b39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:14:10][358780109816095][5826 ms][DEBUG] proc_open done in 3576 ms; code=255; res.len=3343 [2025-09-08 12:14:10][358780109816095][5826 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-08 12:14:10][358780109816095][5826 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:14:12][358780109816095][0 ms][INFO] === Request start === [2025-09-08 12:14:12][358780109816095][1 ms][DEBUG] START check_scloud [2025-09-08 12:14:12][358780109816095][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:14:13][358780109816095][274 ms][DEBUG] SU: done in 274 ms; outu0_a118 31924 18958 24384096 173132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:14:13][358780109816095][275 ms][DEBUG] targetPkg: running [2025-09-08 12:14:13][358780109816095][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-08 12:14:13][358780109816095][275 ms][DEBUG] START check_boot_completed [2025-09-08 12:14:13][358780109816095][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:14:13][358780109816095][321 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:14:13][358780109816095][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:14:13][358780109816095][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:14:13][358780109816095][368 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 12:14:13][358780109816095][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:14:13][358780109816095][509 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1043\nsuccessfulTxPacketsPerSecond: 1.6272905382044485\nretriedTxPackets: 187\nretriedTxPacketsPerSecond: 0.3872306096577158\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1024\nsuccessfulRxPacketsPerSecond: 1.4106257923245362\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:14:13][358780109816095][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:14:13][358780109816095][790 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.166/164.166/164.166/0.000 ms\n [2025-09-08 12:14:13][358780109816095][790 ms][DEBUG] check_internet: online [2025-09-08 12:14:13][358780109816095][790 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:14:13][358780109816095][790 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780109816095\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XEF\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3822\"}'\'' -e'"" [2025-09-08 12:14:13][358780109816095][790 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:14:13][358780109816095][790 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780109816095\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XEF\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3822\"}'\'' -e'"" [2025-09-08 12:14:18][358780109816095][5414 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2c1b1fa-7b89-4ff2-8a50-c4e3ecbf860b","id":"QR_c2c1b1fa-7b89-4ff2-8a50-c4e3ecbf860b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:14:18][358780109816095][5570 ms][DEBUG] proc_open done in 4779 ms; code=255; res.len=3343 [2025-09-08 12:14:18][358780109816095][5570 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-08 12:14:18][358780109816095][5570 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:14:22][351642488683610][0 ms][INFO] === Request start === [2025-09-08 12:14:22][351642488683610][1 ms][DEBUG] START check_scloud [2025-09-08 12:14:22][351642488683610][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:14:22][351642488683610][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 31924 18958 24520552 183460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:14:22][351642488683610][299 ms][DEBUG] targetPkg: running [2025-09-08 12:14:22][351642488683610][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 12:14:22][351642488683610][299 ms][DEBUG] START check_boot_completed [2025-09-08 12:14:22][351642488683610][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:14:23][351642488683610][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:14:23][351642488683610][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:14:23][351642488683610][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:14:23][351642488683610][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:14:23][351642488683610][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:14:23][351642488683610][501 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1043\nsuccessfulTxPacketsPerSecond: 1.6272905382044485\nretriedTxPackets: 187\nretriedTxPacketsPerSecond: 0.3872306096577158\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1024\nsuccessfulRxPacketsPerSecond: 1.4106257923245362\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:14:23][351642488683610][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:14:23][351642488683610][862 ms][DEBUG] SU: done in 361 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.111/267.111/267.111/0.000 ms\n [2025-09-08 12:14:23][351642488683610][862 ms][DEBUG] check_internet: online [2025-09-08 12:14:23][351642488683610][862 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:14:23][351642488683610][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642488683610\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3365\"}'\'' -e'"" [2025-09-08 12:14:23][351642488683610][862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:14:23][351642488683610][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642488683610\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3365\"}'\'' -e'"" [2025-09-08 12:14:27][351642488683610][4766 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a443ee7f-4934-4dcd-bab7-6c9aacd7fa42","id":"QR_a443ee7f-4934-4dcd-bab7-6c9aacd7fa42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:14:27][351642488683610][4922 ms][DEBUG] proc_open done in 4060 ms; code=255; res.len=3343 [2025-09-08 12:14:27][351642488683610][4922 ms][DEBUG] END runCmdUntilRes#1 in 4060 ms [2025-09-08 12:14:27][351642488683610][4922 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:15:05][358283465100865][0 ms][INFO] === Request start === [2025-09-08 12:15:05][358283465100865][1 ms][DEBUG] START check_scloud [2025-09-08 12:15:05][358283465100865][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:15:05][358283465100865][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 31924 18958 24617988 195544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:15:05][358283465100865][315 ms][DEBUG] targetPkg: running [2025-09-08 12:15:05][358283465100865][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 12:15:05][358283465100865][315 ms][DEBUG] START check_boot_completed [2025-09-08 12:15:05][358283465100865][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:15:05][358283465100865][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:15:05][358283465100865][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:15:05][358283465100865][424 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:15:05][358283465100865][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:15:05][358283465100865][425 ms][DEBUG] rawBody.length=1159 [2025-09-08 12:15:05][358283465100865][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358283465100865\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1257\"}'\'' -e'"" [2025-09-08 12:15:05][358283465100865][425 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:15:05][358283465100865][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358283465100865\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1257\"}'\'' -e'"" [2025-09-08 12:15:11][358283465100865][6360 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2964eb8d-324d-4191-8bcf-e23e0b3c0259","id":"QR_2964eb8d-324d-4191-8bcf-e23e0b3c0259","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:15:11][358283465100865][6517 ms][DEBUG] proc_open done in 6091 ms; code=255; res.len=3343 [2025-09-08 12:15:11][358283465100865][6517 ms][DEBUG] END runCmdUntilRes#1 in 6092 ms [2025-09-08 12:15:11][358283465100865][6517 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:15:15][358283465100865][0 ms][INFO] === Request start === [2025-09-08 12:15:15][358283465100865][1 ms][DEBUG] START check_scloud [2025-09-08 12:15:15][358283465100865][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:15:15][358283465100865][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 31924 18958 24746560 206688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:15:15][358283465100865][263 ms][DEBUG] targetPkg: running [2025-09-08 12:15:15][358283465100865][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-08 12:15:15][358283465100865][263 ms][DEBUG] START check_boot_completed [2025-09-08 12:15:15][358283465100865][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:15:15][358283465100865][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:15:15][358283465100865][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:15:15][358283465100865][357 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 12:15:15][358283465100865][357 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 12:15:15][358283465100865][357 ms][DEBUG] rawBody.length=1149 [2025-09-08 12:15:15][358283465100865][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358283465100865\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2885\"}'\'' -e'"" [2025-09-08 12:15:15][358283465100865][357 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:15:15][358283465100865][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358283465100865\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2885\"}'\'' -e'"" [2025-09-08 12:15:18][358283465100865][3621 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ffeeb00-a97f-49ef-bd8e-4b312c13ed54","id":"QR_6ffeeb00-a97f-49ef-bd8e-4b312c13ed54","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:15:19][358283465100865][3777 ms][DEBUG] proc_open done in 3420 ms; code=255; res.len=3343 [2025-09-08 12:15:19][358283465100865][3777 ms][DEBUG] END runCmdUntilRes#1 in 3420 ms [2025-09-08 12:15:19][358283465100865][3777 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:17:03][355844570476376][1 ms][INFO] === Request start === [2025-09-08 12:17:03][355844570476376][1 ms][DEBUG] START check_scloud [2025-09-08 12:17:03][355844570476376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:17:04][355844570476376][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 31924 18958 24882880 219228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:17:04][355844570476376][305 ms][DEBUG] targetPkg: running [2025-09-08 12:17:04][355844570476376][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 12:17:04][355844570476376][305 ms][DEBUG] START check_boot_completed [2025-09-08 12:17:04][355844570476376][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:17:04][355844570476376][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:17:04][355844570476376][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:17:04][355844570476376][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:17:04][355844570476376][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:17:04][355844570476376][384 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:17:04][355844570476376][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355844570476376\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3477\"}'\'' -e'"" [2025-09-08 12:17:04][355844570476376][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:17:04][355844570476376][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355844570476376\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3477\"}'\'' -e'"" [2025-09-08 12:17:08][355844570476376][5007 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98982d81-3f75-4318-bd83-11560617058b","id":"QR_98982d81-3f75-4318-bd83-11560617058b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:17:08][355844570476376][5163 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-09-08 12:17:08][355844570476376][5163 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-08 12:17:08][355844570476376][5164 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:17:11][355844570476376][0 ms][INFO] === Request start === [2025-09-08 12:17:11][355844570476376][1 ms][DEBUG] START check_scloud [2025-09-08 12:17:11][355844570476376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:17:11][355844570476376][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 31924 18958 25013064 229964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:17:11][355844570476376][300 ms][DEBUG] targetPkg: running [2025-09-08 12:17:11][355844570476376][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 12:17:11][355844570476376][300 ms][DEBUG] START check_boot_completed [2025-09-08 12:17:11][355844570476376][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:17:11][355844570476376][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:17:11][355844570476376][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:17:11][355844570476376][409 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 12:17:11][355844570476376][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:17:11][355844570476376][409 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:17:11][355844570476376][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355844570476376\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3266\"}'\'' -e'"" [2025-09-08 12:17:11][355844570476376][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:17:11][355844570476376][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355844570476376\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3266\"}'\'' -e'"" [2025-09-08 12:17:16][355844570476376][5267 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f5f0858-fb55-4f59-b0b9-91d4d28f3dd8","id":"QR_4f5f0858-fb55-4f59-b0b9-91d4d28f3dd8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:17:16][355844570476376][5423 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-08 12:17:16][355844570476376][5423 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-08 12:17:16][355844570476376][5424 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:19:31][359484880240141][1 ms][INFO] === Request start === [2025-09-08 12:19:31][359484880240141][1 ms][DEBUG] START check_scloud [2025-09-08 12:19:31][359484880240141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:19:31][359484880240141][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 31924 18958 25159688 241868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:19:31][359484880240141][308 ms][DEBUG] targetPkg: running [2025-09-08 12:19:31][359484880240141][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 12:19:31][359484880240141][308 ms][DEBUG] START check_boot_completed [2025-09-08 12:19:31][359484880240141][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:19:31][359484880240141][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:19:31][359484880240141][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:19:31][359484880240141][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:19:31][359484880240141][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:19:31][359484880240141][386 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:19:31][359484880240141][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484880240141\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1064\"}'\'' -e'"" [2025-09-08 12:19:31][359484880240141][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:19:31][359484880240141][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484880240141\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1064\"}'\'' -e'"" [2025-09-08 12:19:35][359484880240141][4244 ms][DEBUG] proc_open done in 3858 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 12:19:35][359484880240141][4244 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-08 12:19:35][359484880240141][4244 ms][WARN] Detected error: Process with pid 31924 either refused to load frida-agent, or terminated during injectionProcess with pid 31924 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 12:19:35][359484880240141][4244 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 12:19:35][359484880240141][4494 ms][DEBUG] SU: done in 250 ms; outsystem 19215 18958 12767164 250856 ep_poll 0 S system_server\n [2025-09-08 12:19:35][359484880240141][4495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 12:19:35][359484880240141][4635 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 12:19:35][359484880240141][4635 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 12:19:35][359484880240141][4635 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 12:19:35][359484880240141][4776 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 12:19:35][359484880240141][4776 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 12:19:36][359484880240141][4979 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 12:19:38][359484880240141][6994 ms][DEBUG] START check_boot_completed [2025-09-08 12:19:38][359484880240141][6994 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:19:38][359484880240141][7041 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:19:38][359484880240141][7041 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:19:38][359484880240141][7087 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:19:38][359484880240141][7088 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 12:19:41][359484880240141][10102 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 12:19:41][359484880240141][10102 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484880240141\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1064\"}'\'' -e'"" [2025-09-08 12:19:45][359484880240141][14195 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-08 12:19:45][359484880240141][14351 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=93 [2025-09-08 12:19:45][359484880240141][14351 ms][DEBUG] END runCmdUntilRes#2 in 4249 ms [2025-09-08 12:19:45][359484880240141][14352 ms][INFO] SUCCESS response from frida (len=93) [2025-09-08 12:19:45][][0 ms][INFO] === Request start === [2025-09-08 12:19:45][][1 ms][DEBUG] START check_scloud [2025-09-08 12:19:45][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:19:45][][236 ms][DEBUG] SU: done in 236 ms; outu0_a118 757 18958 23852768 124420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:19:45][][237 ms][DEBUG] targetPkg: running [2025-09-08 12:19:45][][237 ms][DEBUG] END check_scloud in 236 ms [2025-09-08 12:19:45][][237 ms][DEBUG] START check_boot_completed [2025-09-08 12:19:45][][237 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:19:46][][268 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:19:46][][268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:19:46][][315 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:19:46][][315 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:19:46][][315 ms][DEBUG] rawBody.length=1131 [2025-09-08 12:19:46][][315 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX90XJEKP\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4190\"}'\'' -e'"" [2025-09-08 12:19:46][][315 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:19:46][][315 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX90XJEKP\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4190\"}'\'' -e'"" [2025-09-08 12:19:49][][3954 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 12:19:49][][4111 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=107 [2025-09-08 12:19:49][][4111 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-09-08 12:19:49][][4111 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 12:19:51][359484880240141][0 ms][INFO] === Request start === [2025-09-08 12:19:51][359484880240141][1 ms][DEBUG] START check_scloud [2025-09-08 12:19:51][359484880240141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:19:51][359484880240141][251 ms][DEBUG] SU: done in 251 ms; outu0_a118 757 18958 24028008 135888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:19:51][359484880240141][252 ms][DEBUG] targetPkg: running [2025-09-08 12:19:51][359484880240141][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-08 12:19:51][359484880240141][252 ms][DEBUG] START check_boot_completed [2025-09-08 12:19:51][359484880240141][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:19:51][359484880240141][298 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:19:51][359484880240141][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:19:51][359484880240141][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:19:51][359484880240141][345 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:19:51][359484880240141][345 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:19:51][359484880240141][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484880240141\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5040\"}'\'' -e'"" [2025-09-08 12:19:51][359484880240141][345 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:19:51][359484880240141][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484880240141\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5040\"}'\'' -e'"" [2025-09-08 12:19:55][359484880240141][4078 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 12:19:55][359484880240141][4235 ms][DEBUG] proc_open done in 3890 ms; code=255; res.len=107 [2025-09-08 12:19:55][359484880240141][4235 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-09-08 12:19:55][359484880240141][4235 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 12:19:55][][0 ms][INFO] === Request start === [2025-09-08 12:19:55][][1 ms][DEBUG] START check_scloud [2025-09-08 12:19:55][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:19:56][][239 ms][DEBUG] SU: done in 238 ms; outu0_a118 757 18958 24228796 149644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:19:56][][239 ms][DEBUG] targetPkg: running [2025-09-08 12:19:56][][239 ms][DEBUG] END check_scloud in 238 ms [2025-09-08 12:19:56][][239 ms][DEBUG] START check_boot_completed [2025-09-08 12:19:56][][239 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:19:56][][286 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:19:56][][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:19:56][][379 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 12:19:56][][379 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 12:19:56][][379 ms][DEBUG] rawBody.length=1141 [2025-09-08 12:19:56][][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX90XJEKP\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1455\"}'\'' -e'"" [2025-09-08 12:19:56][][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:19:56][][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX90XJEKP\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1455\"}'\'' -e'"" [2025-09-08 12:19:59][][3847 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 12:19:59][][4003 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=107 [2025-09-08 12:19:59][][4003 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-08 12:19:59][][4003 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 12:20:03][358791107948897][0 ms][INFO] === Request start === [2025-09-08 12:20:03][358791107948897][1 ms][DEBUG] START check_scloud [2025-09-08 12:20:03][358791107948897][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:20:04][358791107948897][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 757 18958 24348832 160664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:20:04][358791107948897][303 ms][DEBUG] targetPkg: running [2025-09-08 12:20:04][358791107948897][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 12:20:04][358791107948897][304 ms][DEBUG] START check_boot_completed [2025-09-08 12:20:04][358791107948897][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:20:04][358791107948897][350 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:20:04][358791107948897][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:20:04][358791107948897][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:20:04][358791107948897][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:20:04][358791107948897][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:20:04][358791107948897][508 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1417\nsuccessfulTxPacketsPerSecond: 1.2326026701996882\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.3427558227293251\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1344\nsuccessfulRxPacketsPerSecond: 1.0546333007056157\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:20:04][358791107948897][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:20:05][358791107948897][1350 ms][DEBUG] SU: done in 842 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.662/201.662/201.662/0.000 ms\n [2025-09-08 12:20:05][358791107948897][1350 ms][DEBUG] check_internet: online [2025-09-08 12:20:05][358791107948897][1350 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:20:05][358791107948897][1350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358791107948897\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPH\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8834\"}'\'' -e'"" [2025-09-08 12:20:05][358791107948897][1350 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:20:05][358791107948897][1350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358791107948897\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPH\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8834\"}'\'' -e'"" [2025-09-08 12:20:08][358791107948897][4755 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2fdf0396-6b7f-4706-a0b1-c89b92a33ad8","id":"QR_2fdf0396-6b7f-4706-a0b1-c89b92a33ad8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:20:08][358791107948897][4911 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-08 12:20:08][358791107948897][4911 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-09-08 12:20:08][358791107948897][4912 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:20:11][358791107948897][0 ms][INFO] === Request start === [2025-09-08 12:20:11][358791107948897][1 ms][DEBUG] START check_scloud [2025-09-08 12:20:11][358791107948897][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:20:11][358791107948897][232 ms][DEBUG] SU: done in 232 ms; outu0_a118 757 18958 24414156 172860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:20:11][358791107948897][232 ms][DEBUG] targetPkg: running [2025-09-08 12:20:11][358791107948897][232 ms][DEBUG] END check_scloud in 232 ms [2025-09-08 12:20:11][358791107948897][232 ms][DEBUG] START check_boot_completed [2025-09-08 12:20:11][358791107948897][233 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:20:11][358791107948897][264 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:20:11][358791107948897][264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:20:11][358791107948897][326 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 12:20:11][358791107948897][327 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 12:20:11][358791107948897][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:20:11][358791107948897][483 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1417\nsuccessfulTxPacketsPerSecond: 1.2326026701996882\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.3427558227293251\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1344\nsuccessfulRxPacketsPerSecond: 1.0546333007056157\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:20:11][358791107948897][483 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:20:11][358791107948897][858 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.210/267.210/267.210/0.000 ms\n [2025-09-08 12:20:11][358791107948897][858 ms][DEBUG] check_internet: online [2025-09-08 12:20:11][358791107948897][858 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:20:11][358791107948897][858 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358791107948897\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7725\"}'\'' -e'"" [2025-09-08 12:20:11][358791107948897][858 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:20:11][358791107948897][858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358791107948897\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7725\"}'\'' -e'"" [2025-09-08 12:20:16][358791107948897][5388 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25d3a05f-1e5d-4a9c-aef9-b55f2465508e","id":"QR_25d3a05f-1e5d-4a9c-aef9-b55f2465508e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:20:16][358791107948897][5544 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-08 12:20:16][358791107948897][5544 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-08 12:20:16][358791107948897][5544 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:23:03][350013902042539][1 ms][INFO] === Request start === [2025-09-08 12:23:03][350013902042539][1 ms][DEBUG] START check_scloud [2025-09-08 12:23:03][350013902042539][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:23:03][350013902042539][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 757 18958 24520732 184044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:23:03][350013902042539][291 ms][DEBUG] targetPkg: running [2025-09-08 12:23:03][350013902042539][292 ms][DEBUG] END check_scloud in 290 ms [2025-09-08 12:23:03][350013902042539][292 ms][DEBUG] START check_boot_completed [2025-09-08 12:23:03][350013902042539][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:23:04][350013902042539][322 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:23:04][350013902042539][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:23:04][350013902042539][369 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:23:04][350013902042539][369 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:23:04][350013902042539][369 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:23:04][350013902042539][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013902042539\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9471\"}'\'' -e'"" [2025-09-08 12:23:04][350013902042539][369 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:23:04][350013902042539][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013902042539\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9471\"}'\'' -e'"" [2025-09-08 12:23:08][350013902042539][5180 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7d32763-3d3e-4ef8-a7ef-6984224eeef8","id":"QR_b7d32763-3d3e-4ef8-a7ef-6984224eeef8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:23:09][350013902042539][5337 ms][DEBUG] proc_open done in 4968 ms; code=255; res.len=3343 [2025-09-08 12:23:09][350013902042539][5337 ms][DEBUG] END runCmdUntilRes#1 in 4968 ms [2025-09-08 12:23:09][350013902042539][5337 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:23:11][350013902042539][0 ms][INFO] === Request start === [2025-09-08 12:23:11][350013902042539][1 ms][DEBUG] START check_scloud [2025-09-08 12:23:11][350013902042539][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:23:11][350013902042539][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 757 18958 24679588 195776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:23:11][350013902042539][308 ms][DEBUG] targetPkg: running [2025-09-08 12:23:11][350013902042539][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 12:23:11][350013902042539][308 ms][DEBUG] START check_boot_completed [2025-09-08 12:23:11][350013902042539][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:23:11][350013902042539][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:23:11][350013902042539][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:23:11][350013902042539][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:23:11][350013902042539][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:23:11][350013902042539][401 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:23:11][350013902042539][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013902042539\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6002\"}'\'' -e'"" [2025-09-08 12:23:11][350013902042539][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:23:11][350013902042539][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013902042539\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6002\"}'\'' -e'"" [2025-09-08 12:23:16][350013902042539][4760 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eec4e113-fd12-4a8c-b0f8-64cf664ffea9","id":"QR_eec4e113-fd12-4a8c-b0f8-64cf664ffea9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:23:16][350013902042539][4916 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-09-08 12:23:16][350013902042539][4916 ms][DEBUG] END runCmdUntilRes#1 in 4515 ms [2025-09-08 12:23:16][350013902042539][4916 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:24:03][350013885091701][0 ms][INFO] === Request start === [2025-09-08 12:24:03][350013885091701][1 ms][DEBUG] START check_scloud [2025-09-08 12:24:03][350013885091701][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:24:04][350013885091701][291 ms][DEBUG] SU: done in 291 ms; outu0_a118 757 18958 24815844 206932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:24:04][350013885091701][291 ms][DEBUG] targetPkg: running [2025-09-08 12:24:04][350013885091701][291 ms][DEBUG] END check_scloud in 291 ms [2025-09-08 12:24:04][350013885091701][292 ms][DEBUG] START check_boot_completed [2025-09-08 12:24:04][350013885091701][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:24:04][350013885091701][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:24:04][350013885091701][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:24:04][350013885091701][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:24:04][350013885091701][370 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:24:04][350013885091701][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:24:04][350013885091701][479 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1594\nsuccessfulTxPacketsPerSecond: 0.5879382963740484\nretriedTxPackets: 340\nretriedTxPacketsPerSecond: 0.16276257922219417\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1493\nsuccessfulRxPacketsPerSecond: 0.49493110824708025\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:24:04][350013885091701][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:24:04][350013885091701][838 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=240 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 240.859/240.859/240.859/0.000 ms\n [2025-09-08 12:24:04][350013885091701][838 ms][DEBUG] check_internet: online [2025-09-08 12:24:04][350013885091701][838 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:24:04][350013885091701][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885091701\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1469\"}'\'' -e'"" [2025-09-08 12:24:04][350013885091701][839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:24:04][350013885091701][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885091701\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1469\"}'\'' -e'"" [2025-09-08 12:24:07][350013885091701][3869 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 12:24:07][350013885091701][4025 ms][DEBUG] proc_open done in 3187 ms; code=255; res.len=115 [2025-09-08 12:24:07][350013885091701][4025 ms][DEBUG] END runCmdUntilRes#1 in 3187 ms [2025-09-08 12:24:07][350013885091701][4025 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 12:24:08][][0 ms][INFO] === Request start === [2025-09-08 12:24:08][][1 ms][DEBUG] START check_scloud [2025-09-08 12:24:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:24:08][][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 757 18958 24940012 218916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:24:08][][255 ms][DEBUG] targetPkg: running [2025-09-08 12:24:08][][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-08 12:24:08][][255 ms][DEBUG] START check_boot_completed [2025-09-08 12:24:08][][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:24:08][][301 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:24:08][][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:24:08][][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:24:08][][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:24:08][][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:24:08][][458 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1594\nsuccessfulTxPacketsPerSecond: 0.5879382963740484\nretriedTxPackets: 340\nretriedTxPacketsPerSecond: 0.16276257922219417\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1493\nsuccessfulRxPacketsPerSecond: 0.49493110824708025\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:24:08][][458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:24:08][][724 ms][DEBUG] SU: done in 266 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.987/163.987/163.987/0.000 ms\n [2025-09-08 12:24:08][][725 ms][DEBUG] check_internet: online [2025-09-08 12:24:08][][725 ms][DEBUG] rawBody.length=1131 [2025-09-08 12:24:08][][725 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TC0WTBZB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2644\"}'\'' -e'"" [2025-09-08 12:24:08][][725 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:24:08][][725 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TC0WTBZB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2644\"}'\'' -e'"" [2025-09-08 12:24:13][][5425 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 12:24:13][][5581 ms][DEBUG] proc_open done in 4856 ms; code=255; res.len=115 [2025-09-08 12:24:13][][5581 ms][DEBUG] END runCmdUntilRes#1 in 4857 ms [2025-09-08 12:24:13][][5582 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 12:24:15][350013885091701][0 ms][INFO] === Request start === [2025-09-08 12:24:15][350013885091701][1 ms][DEBUG] START check_scloud [2025-09-08 12:24:15][350013885091701][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:24:15][350013885091701][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 757 18958 25080436 230124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:24:15][350013885091701][259 ms][DEBUG] targetPkg: running [2025-09-08 12:24:15][350013885091701][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-08 12:24:15][350013885091701][259 ms][DEBUG] START check_boot_completed [2025-09-08 12:24:15][350013885091701][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:24:15][350013885091701][305 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:24:15][350013885091701][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:24:15][350013885091701][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:24:15][350013885091701][353 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 12:24:15][350013885091701][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:24:15][350013885091701][477 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1594\nsuccessfulTxPacketsPerSecond: 0.5879382963740484\nretriedTxPackets: 340\nretriedTxPacketsPerSecond: 0.16276257922219417\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1493\nsuccessfulRxPacketsPerSecond: 0.49493110824708025\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:24:15][350013885091701][478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:24:16][350013885091701][805 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.286/232.286/232.286/0.000 ms\n [2025-09-08 12:24:16][350013885091701][805 ms][DEBUG] check_internet: online [2025-09-08 12:24:16][350013885091701][805 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:24:16][350013885091701][805 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885091701\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1648\"}'\'' -e'"" [2025-09-08 12:24:16][350013885091701][805 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:24:16][350013885091701][805 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885091701\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1648\"}'\'' -e'"" [2025-09-08 12:24:21][350013885091701][5664 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3b96b3e-06e9-4597-b5a0-d2e36e661b2e","id":"QR_f3b96b3e-06e9-4597-b5a0-d2e36e661b2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:24:21][350013885091701][5820 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-08 12:24:21][350013885091701][5820 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-08 12:24:21][350013885091701][5820 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:30:04][350832441732346][1 ms][INFO] === Request start === [2025-09-08 12:30:04][350832441732346][1 ms][DEBUG] START check_scloud [2025-09-08 12:30:04][350832441732346][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:30:04][350832441732346][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 757 18958 25198224 241668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:30:04][350832441732346][290 ms][DEBUG] targetPkg: running [2025-09-08 12:30:04][350832441732346][291 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 12:30:04][350832441732346][291 ms][DEBUG] START check_boot_completed [2025-09-08 12:30:04][350832441732346][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:30:04][350832441732346][322 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:30:04][350832441732346][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:30:04][350832441732346][384 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 12:30:04][350832441732346][384 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 12:30:04][350832441732346][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:30:04][350832441732346][541 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1756\nsuccessfulTxPacketsPerSecond: 1.0844752679390284\nretriedTxPackets: 382\nretriedTxPacketsPerSecond: 0.2811602546508592\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1625\nsuccessfulRxPacketsPerSecond: 0.8836465146169861\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:30:04][350832441732346][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:30:06][350832441732346][1806 ms][DEBUG] SU: done in 1265 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.153/201.153/201.153/0.000 ms\n [2025-09-08 12:30:06][350832441732346][1806 ms][DEBUG] check_internet: online [2025-09-08 12:30:06][350832441732346][1806 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:30:06][350832441732346][1806 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832441732346\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1666\"}'\'' -e'"" [2025-09-08 12:30:06][350832441732346][1806 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:30:06][350832441732346][1806 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832441732346\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1666\"}'\'' -e'"" [2025-09-08 12:30:10][350832441732346][5868 ms][DEBUG] proc_open done in 4061 ms (timeout); code=4; out.len=0 err.len=89 [2025-09-08 12:30:10][350832441732346][5868 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-08 12:30:10][350832441732346][5868 ms][WARN] Detected error: Process with pid 757 either refused to load frida-agent, or terminated during injectionProcess with pid 757 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 12:30:10][350832441732346][5868 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 12:30:10][350832441732346][6149 ms][DEBUG] SU: done in 281 ms; outsystem 19215 18958 12899644 245556 ep_poll 0 S system_server\n [2025-09-08 12:30:10][350832441732346][6149 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 12:30:10][350832441732346][6289 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 12:30:10][350832441732346][6289 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 12:30:10][350832441732346][6289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 12:30:10][350832441732346][6430 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 12:30:10][350832441732346][6430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 12:30:10][350832441732346][6633 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 12:30:12][350832441732346][8648 ms][DEBUG] START check_boot_completed [2025-09-08 12:30:12][350832441732346][8648 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:30:12][350832441732346][8695 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:30:12][350832441732346][8695 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:30:12][350832441732346][8742 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:30:12][350832441732346][8742 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 12:30:15][350832441732346][11756 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 12:30:15][350832441732346][11757 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832441732346\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1666\"}'\'' -e'"" [2025-09-08 12:30:19][350832441732346][15396 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_266b3434-49e8-48ce-a00b-54d0e201abc1","id":"QR_266b3434-49e8-48ce-a00b-54d0e201abc1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:30:19][350832441732346][15553 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=3343 [2025-09-08 12:30:19][350832441732346][15553 ms][DEBUG] END runCmdUntilRes#2 in 3796 ms [2025-09-08 12:30:19][350832441732346][15553 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:30:22][350832441732346][0 ms][INFO] === Request start === [2025-09-08 12:30:22][350832441732346][1 ms][DEBUG] START check_scloud [2025-09-08 12:30:22][350832441732346][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:30:22][350832441732346][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 2722 18958 23809760 125208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:30:22][350832441732346][249 ms][DEBUG] targetPkg: running [2025-09-08 12:30:22][350832441732346][249 ms][DEBUG] END check_scloud in 249 ms [2025-09-08 12:30:22][350832441732346][249 ms][DEBUG] START check_boot_completed [2025-09-08 12:30:22][350832441732346][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:30:22][350832441732346][296 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:30:22][350832441732346][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:30:22][350832441732346][358 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:30:22][350832441732346][358 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:30:22][350832441732346][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:30:22][350832441732346][514 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1756\nsuccessfulTxPacketsPerSecond: 1.0844752679390284\nretriedTxPackets: 382\nretriedTxPacketsPerSecond: 0.2811602546508592\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1625\nsuccessfulRxPacketsPerSecond: 0.8836465146169861\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:30:22][350832441732346][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:30:23][350832441732346][858 ms][DEBUG] SU: done in 343 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.647/237.647/237.647/0.000 ms\n [2025-09-08 12:30:23][350832441732346][858 ms][DEBUG] check_internet: online [2025-09-08 12:30:23][350832441732346][858 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:30:23][350832441732346][858 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832441732346\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2781\"}'\'' -e'"" [2025-09-08 12:30:23][350832441732346][858 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:30:23][350832441732346][858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832441732346\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2781\"}'\'' -e'"" [2025-09-08 12:30:28][350832441732346][5904 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_16ea2320-0c87-491a-b1bb-e2623ef084d3","id":"QR_16ea2320-0c87-491a-b1bb-e2623ef084d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:30:28][350832441732346][6060 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-08 12:30:28][350832441732346][6060 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-08 12:30:28][350832441732346][6060 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:32:03][352862574358880][0 ms][INFO] === Request start === [2025-09-08 12:32:03][352862574358880][1 ms][DEBUG] START check_scloud [2025-09-08 12:32:03][352862574358880][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:32:03][352862574358880][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 2722 18958 23862972 138540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:32:03][352862574358880][306 ms][DEBUG] targetPkg: running [2025-09-08 12:32:03][352862574358880][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 12:32:03][352862574358880][306 ms][DEBUG] START check_boot_completed [2025-09-08 12:32:03][352862574358880][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:32:03][352862574358880][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:32:03][352862574358880][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:32:03][352862574358880][385 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 12:32:03][352862574358880][385 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 12:32:03][352862574358880][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:32:03][352862574358880][509 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1855\nsuccessfulTxPacketsPerSecond: 0.3273019409996925\nretriedTxPackets: 407\nretriedTxPacketsPerSecond: 0.08265200530295266\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1708\nsuccessfulRxPacketsPerSecond: 0.27440465760580285\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:32:03][352862574358880][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:32:04][352862574358880][853 ms][DEBUG] SU: done in 343 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.841/198.841/198.841/0.000 ms\n [2025-09-08 12:32:04][352862574358880][853 ms][DEBUG] check_internet: online [2025-09-08 12:32:04][352862574358880][853 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:32:04][352862574358880][853 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352862574358880\",\"model\":\"SM-X216B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9343\"}'\'' -e'"" [2025-09-08 12:32:04][352862574358880][853 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:32:04][352862574358880][853 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352862574358880\",\"model\":\"SM-X216B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9343\"}'\'' -e'"" [2025-09-08 12:32:08][352862574358880][5351 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71c548ad-03bc-49e1-88e4-22526d35b7ed","id":"QR_71c548ad-03bc-49e1-88e4-22526d35b7ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:32:08][352862574358880][5507 ms][DEBUG] proc_open done in 4654 ms; code=255; res.len=3343 [2025-09-08 12:32:08][352862574358880][5508 ms][DEBUG] END runCmdUntilRes#1 in 4654 ms [2025-09-08 12:32:08][352862574358880][5508 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:32:11][352862574358880][1 ms][INFO] === Request start === [2025-09-08 12:32:11][352862574358880][1 ms][DEBUG] START check_scloud [2025-09-08 12:32:11][352862574358880][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:32:11][352862574358880][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 2722 18958 23974448 149636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:32:11][352862574358880][306 ms][DEBUG] targetPkg: running [2025-09-08 12:32:11][352862574358880][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 12:32:11][352862574358880][306 ms][DEBUG] START check_boot_completed [2025-09-08 12:32:11][352862574358880][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:32:11][352862574358880][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:32:11][352862574358880][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:32:11][352862574358880][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:32:11][352862574358880][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:32:11][352862574358880][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:32:11][352862574358880][525 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1855\nsuccessfulTxPacketsPerSecond: 0.3273019409996925\nretriedTxPackets: 407\nretriedTxPacketsPerSecond: 0.08265200530295266\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1708\nsuccessfulRxPacketsPerSecond: 0.27440465760580285\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:32:11][352862574358880][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:32:12][352862574358880][837 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.810/196.810/196.810/0.000 ms\n [2025-09-08 12:32:12][352862574358880][838 ms][DEBUG] check_internet: online [2025-09-08 12:32:12][352862574358880][838 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:32:12][352862574358880][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352862574358880\",\"model\":\"SM-X216B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7755\"}'\'' -e'"" [2025-09-08 12:32:12][352862574358880][838 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:32:12][352862574358880][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352862574358880\",\"model\":\"SM-X216B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7755\"}'\'' -e'"" [2025-09-08 12:32:17][352862574358880][5773 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6744cd6-ba31-4060-bc00-803e346f7891","id":"QR_d6744cd6-ba31-4060-bc00-803e346f7891","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:32:17][352862574358880][5930 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-08 12:32:17][352862574358880][5930 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-08 12:32:17][352862574358880][5930 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:33:03][351328114782865][0 ms][INFO] === Request start === [2025-09-08 12:33:03][351328114782865][1 ms][DEBUG] START check_scloud [2025-09-08 12:33:03][351328114782865][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:33:03][351328114782865][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 2722 18958 24108784 160148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:33:03][351328114782865][287 ms][DEBUG] targetPkg: running [2025-09-08 12:33:03][351328114782865][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-08 12:33:03][351328114782865][287 ms][DEBUG] START check_boot_completed [2025-09-08 12:33:03][351328114782865][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:33:04][351328114782865][319 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:33:04][351328114782865][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:33:04][351328114782865][381 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:33:04][351328114782865][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 12:33:04][351328114782865][381 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:33:04][351328114782865][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351328114782865\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9746\"}'\'' -e'"" [2025-09-08 12:33:04][351328114782865][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:33:04][351328114782865][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351328114782865\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9746\"}'\'' -e'"" [2025-09-08 12:33:07][351328114782865][4021 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d210138-59f8-44a9-8fe8-212bf780ec0d","id":"QR_4d210138-59f8-44a9-8fe8-212bf780ec0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:33:07][351328114782865][4177 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=3343 [2025-09-08 12:33:07][351328114782865][4177 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-09-08 12:33:07][351328114782865][4177 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:33:10][351328114782865][0 ms][INFO] === Request start === [2025-09-08 12:33:10][351328114782865][1 ms][DEBUG] START check_scloud [2025-09-08 12:33:10][351328114782865][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:33:10][351328114782865][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 2722 18958 24249336 171064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:33:10][351328114782865][265 ms][DEBUG] targetPkg: running [2025-09-08 12:33:10][351328114782865][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-08 12:33:10][351328114782865][265 ms][DEBUG] START check_boot_completed [2025-09-08 12:33:10][351328114782865][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:33:10][351328114782865][296 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:33:10][351328114782865][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:33:10][351328114782865][343 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:33:10][351328114782865][344 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:33:10][351328114782865][344 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:33:10][351328114782865][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351328114782865\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7272\"}'\'' -e'"" [2025-09-08 12:33:10][351328114782865][344 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:33:10][351328114782865][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351328114782865\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7272\"}'\'' -e'"" [2025-09-08 12:33:14][351328114782865][4733 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9a05352-b561-49ea-be71-ead0bc83aae9","id":"QR_c9a05352-b561-49ea-be71-ead0bc83aae9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:33:15][351328114782865][4889 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-09-08 12:33:15][351328114782865][4889 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-09-08 12:33:15][351328114782865][4889 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:34:04][357980445421219][0 ms][INFO] === Request start === [2025-09-08 12:34:04][357980445421219][1 ms][DEBUG] START check_scloud [2025-09-08 12:34:04][357980445421219][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:34:05][357980445421219][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 2722 18958 24348664 183044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:34:05][357980445421219][260 ms][DEBUG] targetPkg: running [2025-09-08 12:34:05][357980445421219][260 ms][DEBUG] END check_scloud in 260 ms [2025-09-08 12:34:05][357980445421219][260 ms][DEBUG] START check_boot_completed [2025-09-08 12:34:05][357980445421219][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:34:05][357980445421219][307 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:34:05][357980445421219][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:34:05][357980445421219][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:34:05][357980445421219][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:34:05][357980445421219][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:34:05][357980445421219][463 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1855\nsuccessfulTxPacketsPerSecond: 0.3273019409996925\nretriedTxPackets: 407\nretriedTxPacketsPerSecond: 0.08265200530295266\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1708\nsuccessfulRxPacketsPerSecond: 0.27440465760580285\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:34:05][357980445421219][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:34:05][357980445421219][791 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=185 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 185.011/185.011/185.011/0.000 ms\n [2025-09-08 12:34:05][357980445421219][791 ms][DEBUG] check_internet: online [2025-09-08 12:34:05][357980445421219][792 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:34:05][357980445421219][792 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980445421219\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1254\"}'\'' -e'"" [2025-09-08 12:34:05][357980445421219][792 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:34:05][357980445421219][792 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980445421219\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1254\"}'\'' -e'"" [2025-09-08 12:34:11][357980445421219][6306 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8efe124-749c-4bef-a020-696949aae034","id":"QR_b8efe124-749c-4bef-a020-696949aae034","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:34:11][357980445421219][6462 ms][DEBUG] proc_open done in 5670 ms; code=255; res.len=3343 [2025-09-08 12:34:11][357980445421219][6462 ms][DEBUG] END runCmdUntilRes#1 in 5670 ms [2025-09-08 12:34:11][357980445421219][6462 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:34:14][357980445421219][1 ms][INFO] === Request start === [2025-09-08 12:34:14][357980445421219][1 ms][DEBUG] START check_scloud [2025-09-08 12:34:14][357980445421219][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:34:15][357980445421219][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 2722 18958 24507648 191604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:34:15][357980445421219][310 ms][DEBUG] targetPkg: running [2025-09-08 12:34:15][357980445421219][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 12:34:15][357980445421219][310 ms][DEBUG] START check_boot_completed [2025-09-08 12:34:15][357980445421219][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:34:15][357980445421219][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:34:15][357980445421219][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:34:15][357980445421219][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:34:15][357980445421219][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:34:15][357980445421219][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:34:15][357980445421219][482 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1855\nsuccessfulTxPacketsPerSecond: 0.3273019409996925\nretriedTxPackets: 407\nretriedTxPacketsPerSecond: 0.08265200530295266\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1708\nsuccessfulRxPacketsPerSecond: 0.27440465760580285\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:34:15][357980445421219][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:34:15][357980445421219][747 ms][DEBUG] SU: done in 266 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.176/163.176/163.176/0.000 ms\n [2025-09-08 12:34:15][357980445421219][747 ms][DEBUG] check_internet: online [2025-09-08 12:34:15][357980445421219][748 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:34:15][357980445421219][748 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980445421219\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3990\"}'\'' -e'"" [2025-09-08 12:34:15][357980445421219][748 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:34:15][357980445421219][748 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980445421219\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3990\"}'\'' -e'"" [2025-09-08 12:34:19][357980445421219][4590 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f578a07f-5914-4787-9566-703fe6849089","id":"QR_f578a07f-5914-4787-9566-703fe6849089","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:34:19][357980445421219][4746 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-08 12:34:19][357980445421219][4746 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-08 12:34:19][357980445421219][4746 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:35:03][357211241290370][0 ms][INFO] === Request start === [2025-09-08 12:35:03][357211241290370][1 ms][DEBUG] START check_scloud [2025-09-08 12:35:03][357211241290370][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:35:03][357211241290370][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 2722 18958 24617280 203704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:35:03][357211241290370][265 ms][DEBUG] targetPkg: running [2025-09-08 12:35:03][357211241290370][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-08 12:35:03][357211241290370][265 ms][DEBUG] START check_boot_completed [2025-09-08 12:35:03][357211241290370][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:35:03][357211241290370][311 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:35:03][357211241290370][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:35:03][357211241290370][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:35:03][357211241290370][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:35:03][357211241290370][358 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:35:03][357211241290370][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211241290370\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3094\"}'\'' -e'"" [2025-09-08 12:35:03][357211241290370][358 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:35:03][357211241290370][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211241290370\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3094\"}'\'' -e'"" [2025-09-08 12:35:08][357211241290370][4638 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab97224f-fb34-4fc2-a631-8345a163cc8b","id":"QR_ab97224f-fb34-4fc2-a631-8345a163cc8b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:35:08][357211241290370][4795 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-09-08 12:35:08][357211241290370][4795 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-09-08 12:35:08][357211241290370][4795 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:35:10][357211241290370][0 ms][INFO] === Request start === [2025-09-08 12:35:10][357211241290370][1 ms][DEBUG] START check_scloud [2025-09-08 12:35:10][357211241290370][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:35:11][357211241290370][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 2722 18958 24788360 214324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:35:11][357211241290370][270 ms][DEBUG] targetPkg: running [2025-09-08 12:35:11][357211241290370][270 ms][DEBUG] END check_scloud in 270 ms [2025-09-08 12:35:11][357211241290370][270 ms][DEBUG] START check_boot_completed [2025-09-08 12:35:11][357211241290370][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:35:11][357211241290370][317 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:35:11][357211241290370][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:35:11][357211241290370][411 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 12:35:11][357211241290370][411 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 12:35:11][357211241290370][411 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:35:11][357211241290370][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211241290370\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6833\"}'\'' -e'"" [2025-09-08 12:35:11][357211241290370][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:35:11][357211241290370][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211241290370\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6833\"}'\'' -e'"" [2025-09-08 12:35:16][357211241290370][5987 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1e92c3b-e4f7-43dc-bdf2-19559cd11f86","id":"QR_d1e92c3b-e4f7-43dc-bdf2-19559cd11f86","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:35:16][357211241290370][6144 ms][DEBUG] proc_open done in 5732 ms; code=255; res.len=3343 [2025-09-08 12:35:16][357211241290370][6144 ms][DEBUG] END runCmdUntilRes#1 in 5733 ms [2025-09-08 12:35:16][357211241290370][6144 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:36:03][352049248902554][0 ms][INFO] === Request start === [2025-09-08 12:36:03][352049248902554][1 ms][DEBUG] START check_scloud [2025-09-08 12:36:03][352049248902554][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:36:03][352049248902554][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 2722 18958 24939976 226284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:36:03][352049248902554][282 ms][DEBUG] targetPkg: running [2025-09-08 12:36:03][352049248902554][282 ms][DEBUG] END check_scloud in 282 ms [2025-09-08 12:36:03][352049248902554][283 ms][DEBUG] START check_boot_completed [2025-09-08 12:36:03][352049248902554][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:36:03][352049248902554][329 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:36:03][352049248902554][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:36:03][352049248902554][391 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:36:03][352049248902554][391 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:36:03][352049248902554][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:36:03][352049248902554][517 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2108\nsuccessfulTxPacketsPerSecond: 0.8399985391329754\nretriedTxPackets: 469\nretriedTxPacketsPerSecond: 0.20584944437250782\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1927\nsuccessfulRxPacketsPerSecond: 0.727113359960955\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:36:03][352049248902554][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:36:05][352049248902554][1782 ms][DEBUG] SU: done in 1265 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.806/186.806/186.806/0.000 ms\n [2025-09-08 12:36:05][352049248902554][1782 ms][DEBUG] check_internet: online [2025-09-08 12:36:05][352049248902554][1782 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:36:05][352049248902554][1782 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352049248902554\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9582\"}'\'' -e'"" [2025-09-08 12:36:05][352049248902554][1782 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:36:05][352049248902554][1782 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352049248902554\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9582\"}'\'' -e'"" [2025-09-08 12:36:08][352049248902554][5406 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31bb53b3-174a-43ab-8162-477535dd5601","id":"QR_31bb53b3-174a-43ab-8162-477535dd5601","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:36:09][352049248902554][5562 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-09-08 12:36:09][352049248902554][5562 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-08 12:36:09][352049248902554][5562 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:36:11][352049248902554][0 ms][INFO] === Request start === [2025-09-08 12:36:11][352049248902554][1 ms][DEBUG] START check_scloud [2025-09-08 12:36:11][352049248902554][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:36:11][352049248902554][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 2722 18958 25076432 238184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:36:11][352049248902554][288 ms][DEBUG] targetPkg: running [2025-09-08 12:36:11][352049248902554][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-08 12:36:11][352049248902554][288 ms][DEBUG] START check_boot_completed [2025-09-08 12:36:11][352049248902554][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:36:11][352049248902554][335 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:36:11][352049248902554][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:36:11][352049248902554][413 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 12:36:11][352049248902554][413 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 12:36:11][352049248902554][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:36:11][352049248902554][538 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2108\nsuccessfulTxPacketsPerSecond: 0.8399985391329754\nretriedTxPackets: 469\nretriedTxPacketsPerSecond: 0.20584944437250782\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1927\nsuccessfulRxPacketsPerSecond: 0.727113359960955\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:36:11][352049248902554][538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:36:12][352049248902554][913 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.665/237.665/237.665/0.000 ms\n [2025-09-08 12:36:12][352049248902554][913 ms][DEBUG] check_internet: online [2025-09-08 12:36:12][352049248902554][913 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:36:12][352049248902554][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352049248902554\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1974\"}'\'' -e'"" [2025-09-08 12:36:12][352049248902554][913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:36:12][352049248902554][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352049248902554\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1974\"}'\'' -e'"" [2025-09-08 12:36:15][352049248902554][4630 ms][DEBUG] proc_open done in 3717 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 12:36:15][352049248902554][4630 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-09-08 12:36:15][352049248902554][4631 ms][WARN] Detected error: Process with pid 2722 either refused to load frida-agent, or terminated during injectionProcess with pid 2722 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 12:36:15][352049248902554][4631 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 12:36:16][352049248902554][4880 ms][DEBUG] SU: done in 250 ms; outsystem 19215 18958 12826168 205900 ep_poll 0 S system_server\n [2025-09-08 12:36:16][352049248902554][4880 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 12:36:16][352049248902554][5005 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 12:36:16][352049248902554][5005 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 12:36:16][352049248902554][5005 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 12:36:16][352049248902554][5115 ms][DEBUG] SU: done in 109 ms; out [2025-09-08 12:36:16][352049248902554][5115 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 12:36:16][352049248902554][5302 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 12:36:18][352049248902554][7317 ms][DEBUG] START check_boot_completed [2025-09-08 12:36:18][352049248902554][7317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:36:18][352049248902554][7364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:36:18][352049248902554][7364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:36:18][352049248902554][7427 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:36:18][352049248902554][7427 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 12:36:21][352049248902554][10442 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 12:36:21][352049248902554][10442 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352049248902554\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1974\"}'\'' -e'"" [2025-09-08 12:36:26][352049248902554][15253 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7cd11e28-a6ff-4de4-ac5c-2b223039789a","id":"QR_7cd11e28-a6ff-4de4-ac5c-2b223039789a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:36:26][352049248902554][15409 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-08 12:36:26][352049248902554][15409 ms][DEBUG] END runCmdUntilRes#2 in 4968 ms [2025-09-08 12:36:26][352049248902554][15409 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:37:03][350894210613941][1 ms][INFO] === Request start === [2025-09-08 12:37:03][350894210613941][1 ms][DEBUG] START check_scloud [2025-09-08 12:37:03][350894210613941][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:37:03][350894210613941][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 4174 18958 23776216 127988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:37:03][350894210613941][303 ms][DEBUG] targetPkg: running [2025-09-08 12:37:03][350894210613941][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 12:37:03][350894210613941][303 ms][DEBUG] START check_boot_completed [2025-09-08 12:37:03][350894210613941][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:37:03][350894210613941][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:37:03][350894210613941][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:37:03][350894210613941][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:37:03][350894210613941][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:37:03][350894210613941][397 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:37:03][350894210613941][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350894210613941\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8068\"}'\'' -e'"" [2025-09-08 12:37:03][350894210613941][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:37:03][350894210613941][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350894210613941\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8068\"}'\'' -e'"" [2025-09-08 12:37:06][350894210613941][3740 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45795d14-ba6e-46a6-bff7-66bcb050db3e","id":"QR_45795d14-ba6e-46a6-bff7-66bcb050db3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:37:07][350894210613941][3896 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-08 12:37:07][350894210613941][3896 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-08 12:37:07][350894210613941][3896 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:37:09][350894210613941][0 ms][INFO] === Request start === [2025-09-08 12:37:09][350894210613941][1 ms][DEBUG] START check_scloud [2025-09-08 12:37:09][350894210613941][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:37:09][350894210613941][276 ms][DEBUG] SU: done in 276 ms; outu0_a118 4174 18958 23945312 138704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:37:09][350894210613941][276 ms][DEBUG] targetPkg: running [2025-09-08 12:37:09][350894210613941][277 ms][DEBUG] END check_scloud in 276 ms [2025-09-08 12:37:09][350894210613941][277 ms][DEBUG] START check_boot_completed [2025-09-08 12:37:09][350894210613941][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:37:09][350894210613941][323 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:37:09][350894210613941][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:37:09][350894210613941][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:37:09][350894210613941][370 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:37:09][350894210613941][370 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:37:09][350894210613941][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350894210613941\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8707\"}'\'' -e'"" [2025-09-08 12:37:09][350894210613941][370 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:37:09][350894210613941][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350894210613941\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8707\"}'\'' -e'"" [2025-09-08 12:37:14][350894210613941][5103 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12d9ead4-eadb-42bb-9fbb-8d114638538f","id":"QR_12d9ead4-eadb-42bb-9fbb-8d114638538f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:37:14][350894210613941][5259 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-08 12:37:14][350894210613941][5260 ms][DEBUG] END runCmdUntilRes#1 in 4890 ms [2025-09-08 12:37:14][350894210613941][5260 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:41:03][351351020695062][1 ms][INFO] === Request start === [2025-09-08 12:41:03][351351020695062][1 ms][DEBUG] START check_scloud [2025-09-08 12:41:03][351351020695062][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:41:04][351351020695062][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 4174 18958 24022996 150408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:41:04][351351020695062][275 ms][DEBUG] targetPkg: running [2025-09-08 12:41:04][351351020695062][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-08 12:41:04][351351020695062][275 ms][DEBUG] START check_boot_completed [2025-09-08 12:41:04][351351020695062][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:41:04][351351020695062][306 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:41:04][351351020695062][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:41:04][351351020695062][354 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 12:41:04][351351020695062][354 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 12:41:04][351351020695062][355 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:41:04][351351020695062][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351020695062\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3026\"}'\'' -e'"" [2025-09-08 12:41:04][351351020695062][355 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:41:04][351351020695062][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351020695062\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3026\"}'\'' -e'"" [2025-09-08 12:41:07][351351020695062][3743 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_808c7d69-eab9-4df5-8963-14ac87a886e1","id":"QR_808c7d69-eab9-4df5-8963-14ac87a886e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:41:07][351351020695062][3899 ms][DEBUG] proc_open done in 3544 ms; code=255; res.len=3343 [2025-09-08 12:41:07][351351020695062][3899 ms][DEBUG] END runCmdUntilRes#1 in 3545 ms [2025-09-08 12:41:07][351351020695062][3899 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:41:09][351351020695062][0 ms][INFO] === Request start === [2025-09-08 12:41:09][351351020695062][1 ms][DEBUG] START check_scloud [2025-09-08 12:41:09][351351020695062][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:41:10][351351020695062][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 4174 18958 24202964 161628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:41:10][351351020695062][314 ms][DEBUG] targetPkg: running [2025-09-08 12:41:10][351351020695062][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 12:41:10][351351020695062][314 ms][DEBUG] START check_boot_completed [2025-09-08 12:41:10][351351020695062][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:41:10][351351020695062][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:41:10][351351020695062][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:41:10][351351020695062][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:41:10][351351020695062][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:41:10][351351020695062][423 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:41:10][351351020695062][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351020695062\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6971\"}'\'' -e'"" [2025-09-08 12:41:10][351351020695062][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:41:10][351351020695062][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351020695062\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6971\"}'\'' -e'"" [2025-09-08 12:41:15][351351020695062][5703 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f3e85c4-1355-4027-b430-2d2446e45207","id":"QR_0f3e85c4-1355-4027-b430-2d2446e45207","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:41:15][351351020695062][5859 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-09-08 12:41:15][351351020695062][5859 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-08 12:41:15][351351020695062][5859 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:41:19][354678951164628][0 ms][INFO] === Request start === [2025-09-08 12:41:19][354678951164628][1 ms][DEBUG] START check_scloud [2025-09-08 12:41:19][354678951164628][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:41:20][354678951164628][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 4174 18958 24363996 172640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:41:20][354678951164628][296 ms][DEBUG] targetPkg: running [2025-09-08 12:41:20][354678951164628][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-08 12:41:20][354678951164628][296 ms][DEBUG] START check_boot_completed [2025-09-08 12:41:20][354678951164628][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:41:20][354678951164628][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:41:20][354678951164628][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:41:20][354678951164628][405 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 12:41:20][354678951164628][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:41:20][354678951164628][405 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:41:20][354678951164628][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354678951164628\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3857\"}'\'' -e'"" [2025-09-08 12:41:20][354678951164628][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:41:20][354678951164628][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354678951164628\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3857\"}'\'' -e'"" [2025-09-08 12:41:24][354678951164628][4185 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48932392-6d05-4a8f-8506-27c2c081665d","id":"QR_48932392-6d05-4a8f-8506-27c2c081665d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:41:24][354678951164628][4341 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-09-08 12:41:24][354678951164628][4341 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-09-08 12:41:24][354678951164628][4341 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:41:26][354678951164628][0 ms][INFO] === Request start === [2025-09-08 12:41:26][354678951164628][1 ms][DEBUG] START check_scloud [2025-09-08 12:41:26][354678951164628][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:41:26][354678951164628][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 4174 18958 24522752 184472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:41:26][354678951164628][311 ms][DEBUG] targetPkg: running [2025-09-08 12:41:26][354678951164628][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 12:41:26][354678951164628][311 ms][DEBUG] START check_boot_completed [2025-09-08 12:41:26][354678951164628][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:41:26][354678951164628][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:41:26][354678951164628][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:41:27][354678951164628][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:41:27][354678951164628][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:41:27][354678951164628][420 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:41:27][354678951164628][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354678951164628\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2512\"}'\'' -e'"" [2025-09-08 12:41:27][354678951164628][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:41:27][354678951164628][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354678951164628\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2512\"}'\'' -e'"" [2025-09-08 12:41:31][354678951164628][5294 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c588acc-595c-466e-bf78-0cf4f4f5cd33","id":"QR_4c588acc-595c-466e-bf78-0cf4f4f5cd33","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:41:32][354678951164628][5450 ms][DEBUG] proc_open done in 5029 ms; code=255; res.len=3343 [2025-09-08 12:41:32][354678951164628][5450 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-08 12:41:32][354678951164628][5450 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:42:07][358689980236697][0 ms][INFO] === Request start === [2025-09-08 12:42:07][358689980236697][1 ms][DEBUG] START check_scloud [2025-09-08 12:42:07][358689980236697][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:42:07][358689980236697][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 4174 18958 24652828 196308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:42:07][358689980236697][284 ms][DEBUG] targetPkg: running [2025-09-08 12:42:07][358689980236697][284 ms][DEBUG] END check_scloud in 284 ms [2025-09-08 12:42:07][358689980236697][284 ms][DEBUG] START check_boot_completed [2025-09-08 12:42:07][358689980236697][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:42:07][358689980236697][329 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 12:42:07][358689980236697][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:42:07][358689980236697][407 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 12:42:07][358689980236697][408 ms][DEBUG] END check_boot_completed in 123 ms [2025-09-08 12:42:07][358689980236697][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:42:08][358689980236697][564 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2263\nsuccessfulTxPacketsPerSecond: 0.13799693112296962\nretriedTxPackets: 510\nretriedTxPacketsPerSecond: 8.646806281536926E-6\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2065\nsuccessfulRxPacketsPerSecond: 0.1379933458618285\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:42:08][358689980236697][564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:42:10][358689980236697][2423 ms][DEBUG] SU: done in 1859 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.446/198.446/198.446/0.000 ms\n [2025-09-08 12:42:10][358689980236697][2423 ms][DEBUG] check_internet: online [2025-09-08 12:42:10][358689980236697][2423 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:42:10][358689980236697][2423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358689980236697\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3409\"}'\'' -e'"" [2025-09-08 12:42:10][358689980236697][2423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:42:10][358689980236697][2423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358689980236697\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3409\"}'\'' -e'"" [2025-09-08 12:42:14][358689980236697][6531 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a5edc32-0838-4123-9cbb-9bf63b732bcb","id":"QR_1a5edc32-0838-4123-9cbb-9bf63b732bcb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:42:14][358689980236697][6687 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-09-08 12:42:14][358689980236697][6687 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-09-08 12:42:14][358689980236697][6687 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:44:03][353713131988298][1 ms][INFO] === Request start === [2025-09-08 12:44:03][353713131988298][1 ms][DEBUG] START check_scloud [2025-09-08 12:44:03][353713131988298][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:44:03][353713131988298][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 4174 18958 24780928 208112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:44:03][353713131988298][310 ms][DEBUG] targetPkg: running [2025-09-08 12:44:03][353713131988298][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 12:44:03][353713131988298][310 ms][DEBUG] START check_boot_completed [2025-09-08 12:44:03][353713131988298][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:44:04][353713131988298][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:44:04][353713131988298][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:44:04][353713131988298][450 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 12:44:04][353713131988298][450 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 12:44:04][353713131988298][450 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:44:04][353713131988298][575 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2604\nsuccessfulTxPacketsPerSecond: 3.0407333428449133\nretriedTxPackets: 548\nretriedTxPacketsPerSecond: 0.33885004993579676\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2362\nsuccessfulRxPacketsPerSecond: 2.6483806534455696\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:44:04][353713131988298][576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:44:04][353713131988298][919 ms][DEBUG] SU: done in 343 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.113/189.113/189.113/0.000 ms\n [2025-09-08 12:44:04][353713131988298][919 ms][DEBUG] check_internet: online [2025-09-08 12:44:04][353713131988298][919 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:44:04][353713131988298][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353713131988298\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5088\"}'\'' -e'"" [2025-09-08 12:44:04][353713131988298][919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:44:04][353713131988298][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353713131988298\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5088\"}'\'' -e'"" [2025-09-08 12:44:08][353713131988298][5183 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cae4bba1-6be1-4c37-b26b-978ee18e394d","id":"QR_cae4bba1-6be1-4c37-b26b-978ee18e394d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:44:09][353713131988298][5339 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-09-08 12:44:09][353713131988298][5339 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-09-08 12:44:09][353713131988298][5340 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:44:11][353713131988298][0 ms][INFO] === Request start === [2025-09-08 12:44:11][353713131988298][1 ms][DEBUG] START check_scloud [2025-09-08 12:44:11][353713131988298][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:44:11][353713131988298][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 4174 18958 24909128 217604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:44:11][353713131988298][268 ms][DEBUG] targetPkg: running [2025-09-08 12:44:11][353713131988298][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-08 12:44:11][353713131988298][268 ms][DEBUG] START check_boot_completed [2025-09-08 12:44:11][353713131988298][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:44:11][353713131988298][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:44:11][353713131988298][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:44:11][353713131988298][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:44:11][353713131988298][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:44:11][353713131988298][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:44:11][353713131988298][487 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2604\nsuccessfulTxPacketsPerSecond: 3.0407333428449133\nretriedTxPackets: 548\nretriedTxPacketsPerSecond: 0.33885004993579676\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2362\nsuccessfulRxPacketsPerSecond: 2.6483806534455696\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:44:11][353713131988298][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:44:12][353713131988298][877 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.168/267.168/267.168/0.000 ms\n [2025-09-08 12:44:12][353713131988298][877 ms][DEBUG] check_internet: online [2025-09-08 12:44:12][353713131988298][877 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:44:12][353713131988298][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353713131988298\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3830\"}'\'' -e'"" [2025-09-08 12:44:12][353713131988298][878 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:44:12][353713131988298][878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353713131988298\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3830\"}'\'' -e'"" [2025-09-08 12:44:17][353713131988298][5813 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98c3a7e8-71d6-43ec-805b-5f3161c14208","id":"QR_98c3a7e8-71d6-43ec-805b-5f3161c14208","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:44:17][353713131988298][5970 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-08 12:44:17][353713131988298][5970 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-08 12:44:17][353713131988298][5970 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:45:03][351263053828736][0 ms][INFO] === Request start === [2025-09-08 12:45:03][351263053828736][1 ms][DEBUG] START check_scloud [2025-09-08 12:45:03][351263053828736][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:45:04][351263053828736][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 4174 18958 25021832 190952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:45:04][351263053828736][322 ms][DEBUG] targetPkg: running [2025-09-08 12:45:04][351263053828736][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-08 12:45:04][351263053828736][322 ms][DEBUG] START check_boot_completed [2025-09-08 12:45:04][351263053828736][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:45:04][351263053828736][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:45:04][351263053828736][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:45:04][351263053828736][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:45:04][351263053828736][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:45:04][351263053828736][415 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:45:04][351263053828736][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263053828736\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7242\"}'\'' -e'"" [2025-09-08 12:45:04][351263053828736][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:45:04][351263053828736][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263053828736\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7242\"}'\'' -e'"" [2025-09-08 12:45:07][351263053828736][4008 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05a2704c-8aea-4fe5-a2d5-09f409235322","id":"QR_05a2704c-8aea-4fe5-a2d5-09f409235322","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:45:08][351263053828736][4164 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-09-08 12:45:08][351263053828736][4164 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-08 12:45:08][351263053828736][4165 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:45:10][351263053828736][0 ms][INFO] === Request start === [2025-09-08 12:45:10][351263053828736][1 ms][DEBUG] START check_scloud [2025-09-08 12:45:10][351263053828736][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:45:10][351263053828736][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 4174 18958 25184912 198812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:45:10][351263053828736][315 ms][DEBUG] targetPkg: running [2025-09-08 12:45:10][351263053828736][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 12:45:10][351263053828736][315 ms][DEBUG] START check_boot_completed [2025-09-08 12:45:10][351263053828736][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:45:10][351263053828736][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:45:10][351263053828736][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:45:10][351263053828736][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:45:10][351263053828736][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:45:10][351263053828736][394 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:45:10][351263053828736][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263053828736\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9203\"}'\'' -e'"" [2025-09-08 12:45:10][351263053828736][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:45:10][351263053828736][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263053828736\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9203\"}'\'' -e'"" [2025-09-08 12:45:14][351263053828736][4346 ms][DEBUG] proc_open done in 3952 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 12:45:14][351263053828736][4346 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-08 12:45:14][351263053828736][4346 ms][WARN] Detected error: Process with pid 4174 either refused to load frida-agent, or terminated during injectionProcess with pid 4174 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 12:45:14][351263053828736][4346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 12:45:15][351263053828736][4627 ms][DEBUG] SU: done in 281 ms; outsystem 19215 18958 12835172 179588 ep_poll 0 S system_server\n [2025-09-08 12:45:15][351263053828736][4627 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 12:45:15][351263053828736][4767 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 12:45:15][351263053828736][4768 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 12:45:15][351263053828736][4768 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 12:45:15][351263053828736][4924 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 12:45:15][351263053828736][4924 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 12:45:15][351263053828736][5127 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 12:45:17][351263053828736][7142 ms][DEBUG] START check_boot_completed [2025-09-08 12:45:17][351263053828736][7142 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:45:17][351263053828736][7189 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:45:17][351263053828736][7189 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:45:17][351263053828736][7251 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:45:17][351263053828736][7251 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:45:20][351263053828736][10266 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 12:45:20][351263053828736][10266 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263053828736\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9203\"}'\'' -e'"" [2025-09-08 12:45:25][351263053828736][15296 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0dd1b087-517b-45ad-afa2-d4cfa941a74d","id":"QR_0dd1b087-517b-45ad-afa2-d4cfa941a74d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:45:25][351263053828736][15453 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-08 12:45:25][351263053828736][15453 ms][DEBUG] END runCmdUntilRes#2 in 5187 ms [2025-09-08 12:45:25][351263053828736][15453 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:47:03][352001419575883][1 ms][INFO] === Request start === [2025-09-08 12:47:03][352001419575883][1 ms][DEBUG] START check_scloud [2025-09-08 12:47:03][352001419575883][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:47:03][352001419575883][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 7212 18958 23767512 127092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:47:03][352001419575883][258 ms][DEBUG] targetPkg: running [2025-09-08 12:47:03][352001419575883][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-08 12:47:03][352001419575883][258 ms][DEBUG] START check_boot_completed [2025-09-08 12:47:03][352001419575883][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:47:03][352001419575883][289 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:47:03][352001419575883][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:47:03][352001419575883][336 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:47:03][352001419575883][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:47:03][352001419575883][336 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:47:03][352001419575883][336 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001419575883\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1357\"}'\'' -e'"" [2025-09-08 12:47:03][352001419575883][336 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:47:03][352001419575883][336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001419575883\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1357\"}'\'' -e'"" [2025-09-08 12:47:07][352001419575883][4569 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65704450-a2f4-46c9-a4dc-04f3329e05d1","id":"QR_65704450-a2f4-46c9-a4dc-04f3329e05d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:47:08][352001419575883][4725 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-08 12:47:08][352001419575883][4725 ms][DEBUG] END runCmdUntilRes#1 in 4390 ms [2025-09-08 12:47:08][352001419575883][4725 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:47:10][352001419575883][0 ms][INFO] === Request start === [2025-09-08 12:47:10][352001419575883][1 ms][DEBUG] START check_scloud [2025-09-08 12:47:10][352001419575883][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:47:10][352001419575883][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 7212 18958 23931672 137916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:47:10][352001419575883][299 ms][DEBUG] targetPkg: running [2025-09-08 12:47:10][352001419575883][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 12:47:10][352001419575883][299 ms][DEBUG] START check_boot_completed [2025-09-08 12:47:10][352001419575883][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:47:10][352001419575883][343 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 12:47:10][352001419575883][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:47:10][352001419575883][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:47:10][352001419575883][391 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 12:47:10][352001419575883][391 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:47:10][352001419575883][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001419575883\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5464\"}'\'' -e'"" [2025-09-08 12:47:10][352001419575883][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:47:10][352001419575883][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001419575883\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5464\"}'\'' -e'"" [2025-09-08 12:47:16][352001419575883][5514 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ece7cb9b-af7c-404f-a426-86727e5375b8","id":"QR_ece7cb9b-af7c-404f-a426-86727e5375b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:47:16][352001419575883][5670 ms][DEBUG] proc_open done in 5279 ms; code=255; res.len=3343 [2025-09-08 12:47:16][352001419575883][5671 ms][DEBUG] END runCmdUntilRes#1 in 5279 ms [2025-09-08 12:47:16][352001419575883][5671 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:47:20][352813892091208][1 ms][INFO] === Request start === [2025-09-08 12:47:20][352813892091208][1 ms][DEBUG] START check_scloud [2025-09-08 12:47:20][352813892091208][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:47:20][352813892091208][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 7212 18958 24087124 149384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:47:20][352813892091208][303 ms][DEBUG] targetPkg: running [2025-09-08 12:47:20][352813892091208][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 12:47:20][352813892091208][303 ms][DEBUG] START check_boot_completed [2025-09-08 12:47:20][352813892091208][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:47:20][352813892091208][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:47:20][352813892091208][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:47:20][352813892091208][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:47:20][352813892091208][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:47:20][352813892091208][396 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:47:20][352813892091208][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352813892091208\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5905\"}'\'' -e'"" [2025-09-08 12:47:20][352813892091208][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:47:20][352813892091208][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352813892091208\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5905\"}'\'' -e'"" [2025-09-08 12:47:24][352813892091208][3754 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0017ce7c-a323-4c30-953d-bd707948e47e","id":"QR_0017ce7c-a323-4c30-953d-bd707948e47e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:47:24][352813892091208][3911 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=3343 [2025-09-08 12:47:24][352813892091208][3911 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-09-08 12:47:24][352813892091208][3911 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:47:26][352813892091208][0 ms][INFO] === Request start === [2025-09-08 12:47:26][352813892091208][1 ms][DEBUG] START check_scloud [2025-09-08 12:47:26][352813892091208][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:47:26][352813892091208][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 7212 18958 24204984 160532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:47:26][352813892091208][271 ms][DEBUG] targetPkg: running [2025-09-08 12:47:26][352813892091208][271 ms][DEBUG] END check_scloud in 270 ms [2025-09-08 12:47:26][352813892091208][271 ms][DEBUG] START check_boot_completed [2025-09-08 12:47:26][352813892091208][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:47:26][352813892091208][318 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:47:26][352813892091208][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:47:27][352813892091208][411 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 12:47:27][352813892091208][412 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 12:47:27][352813892091208][412 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:47:27][352813892091208][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352813892091208\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6829\"}'\'' -e'"" [2025-09-08 12:47:27][352813892091208][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:47:27][352813892091208][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352813892091208\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6829\"}'\'' -e'"" [2025-09-08 12:47:31][352813892091208][5145 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e387be34-ff1a-405e-a78a-9a7de843475f","id":"QR_e387be34-ff1a-405e-a78a-9a7de843475f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:47:31][352813892091208][5301 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-08 12:47:31][352813892091208][5301 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-08 12:47:31][352813892091208][5301 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:48:03][352682500888903][0 ms][INFO] === Request start === [2025-09-08 12:48:03][352682500888903][1 ms][DEBUG] START check_scloud [2025-09-08 12:48:03][352682500888903][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:48:03][352682500888903][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 7212 18958 24279764 172708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:48:03][352682500888903][295 ms][DEBUG] targetPkg: running [2025-09-08 12:48:03][352682500888903][295 ms][DEBUG] END check_scloud in 295 ms [2025-09-08 12:48:03][352682500888903][295 ms][DEBUG] START check_boot_completed [2025-09-08 12:48:03][352682500888903][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:48:03][352682500888903][342 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:48:03][352682500888903][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:48:03][352682500888903][405 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:48:03][352682500888903][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:48:03][352682500888903][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:48:03][352682500888903][545 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2905\nsuccessfulTxPacketsPerSecond: 1.0013606528472243\nretriedTxPackets: 617\nretriedTxPacketsPerSecond: 0.2295477908520215\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2620\nsuccessfulRxPacketsPerSecond: 0.8583091310119065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:48:03][352682500888903][545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:48:05][352682500888903][2170 ms][DEBUG] SU: done in 1624 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.521/192.521/192.521/0.000 ms\n [2025-09-08 12:48:05][352682500888903][2170 ms][DEBUG] check_internet: online [2025-09-08 12:48:05][352682500888903][2170 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:48:05][352682500888903][2170 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682500888903\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2034\"}'\'' -e'"" [2025-09-08 12:48:05][352682500888903][2170 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:48:05][352682500888903][2170 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682500888903\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2034\"}'\'' -e'"" [2025-09-08 12:48:09][352682500888903][5841 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc7ed376-1e0d-43d1-b25e-540d77183cbb","id":"QR_dc7ed376-1e0d-43d1-b25e-540d77183cbb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:48:09][352682500888903][5997 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-09-08 12:48:09][352682500888903][5997 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-09-08 12:48:09][352682500888903][5997 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:48:11][352682500888903][0 ms][INFO] === Request start === [2025-09-08 12:48:11][352682500888903][1 ms][DEBUG] START check_scloud [2025-09-08 12:48:11][352682500888903][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:48:11][352682500888903][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 7212 18958 24453084 183632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:48:11][352682500888903][315 ms][DEBUG] targetPkg: running [2025-09-08 12:48:11][352682500888903][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 12:48:11][352682500888903][315 ms][DEBUG] START check_boot_completed [2025-09-08 12:48:11][352682500888903][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:48:11][352682500888903][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:48:11][352682500888903][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:48:12][352682500888903][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:48:12][352682500888903][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:48:12][352682500888903][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:48:12][352682500888903][518 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2905\nsuccessfulTxPacketsPerSecond: 1.0013606528472243\nretriedTxPackets: 617\nretriedTxPacketsPerSecond: 0.2295477908520215\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2620\nsuccessfulRxPacketsPerSecond: 0.8583091310119065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:48:12][352682500888903][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:48:12][352682500888903][862 ms][DEBUG] SU: done in 343 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=246 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 246.328/246.328/246.328/0.000 ms\n [2025-09-08 12:48:12][352682500888903][862 ms][DEBUG] check_internet: online [2025-09-08 12:48:12][352682500888903][862 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:48:12][352682500888903][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682500888903\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SEK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3326\"}'\'' -e'"" [2025-09-08 12:48:12][352682500888903][862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:48:12][352682500888903][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682500888903\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SEK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3326\"}'\'' -e'"" [2025-09-08 12:48:17][352682500888903][5439 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78e70f65-d226-4e5e-9d4b-553ccec3e313","id":"QR_78e70f65-d226-4e5e-9d4b-553ccec3e313","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:48:17][352682500888903][5595 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-08 12:48:17][352682500888903][5595 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-08 12:48:17][352682500888903][5595 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:48:21][351285623974708][0 ms][INFO] === Request start === [2025-09-08 12:48:21][351285623974708][1 ms][DEBUG] START check_scloud [2025-09-08 12:48:21][351285623974708][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:48:21][351285623974708][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 7212 18958 24634596 195528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:48:21][351285623974708][256 ms][DEBUG] targetPkg: running [2025-09-08 12:48:21][351285623974708][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-08 12:48:21][351285623974708][256 ms][DEBUG] START check_boot_completed [2025-09-08 12:48:21][351285623974708][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:48:21][351285623974708][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:48:21][351285623974708][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:48:21][351285623974708][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:48:21][351285623974708][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:48:21][351285623974708][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:48:21][351285623974708][459 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2905\nsuccessfulTxPacketsPerSecond: 1.0013606528472243\nretriedTxPackets: 617\nretriedTxPacketsPerSecond: 0.2295477908520215\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2620\nsuccessfulRxPacketsPerSecond: 0.8583091310119065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:48:21][351285623974708][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:48:22][351285623974708][850 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=285 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 285.445/285.445/285.445/0.000 ms\n [2025-09-08 12:48:22][351285623974708][850 ms][DEBUG] check_internet: online [2025-09-08 12:48:22][351285623974708][850 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:48:22][351285623974708][850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285623974708\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7626\"}'\'' -e'"" [2025-09-08 12:48:22][351285623974708][850 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:48:22][351285623974708][850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285623974708\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7626\"}'\'' -e'"" [2025-09-08 12:48:25][351285623974708][4224 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d71d36d9-3c26-4b8a-b13f-5c12ed8bf3df","id":"QR_d71d36d9-3c26-4b8a-b13f-5c12ed8bf3df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:48:25][351285623974708][4380 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-08 12:48:25][351285623974708][4380 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-08 12:48:25][351285623974708][4380 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:48:28][351285623974708][0 ms][INFO] === Request start === [2025-09-08 12:48:28][351285623974708][1 ms][DEBUG] START check_scloud [2025-09-08 12:48:28][351285623974708][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:48:28][351285623974708][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 7212 18958 24754632 206636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:48:28][351285623974708][266 ms][DEBUG] targetPkg: running [2025-09-08 12:48:28][351285623974708][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-08 12:48:28][351285623974708][266 ms][DEBUG] START check_boot_completed [2025-09-08 12:48:28][351285623974708][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:48:28][351285623974708][297 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:48:28][351285623974708][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:48:28][351285623974708][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:48:28][351285623974708][344 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:48:28][351285623974708][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:48:28][351285623974708][454 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2905\nsuccessfulTxPacketsPerSecond: 1.0013606528472243\nretriedTxPackets: 617\nretriedTxPacketsPerSecond: 0.2295477908520215\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2620\nsuccessfulRxPacketsPerSecond: 0.8583091310119065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:48:28][351285623974708][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:48:28][351285623974708][828 ms][DEBUG] SU: done in 374 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=262 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 262.337/262.337/262.337/0.000 ms\n [2025-09-08 12:48:28][351285623974708][828 ms][DEBUG] check_internet: online [2025-09-08 12:48:28][351285623974708][828 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:48:28][351285623974708][828 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285623974708\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8587\"}'\'' -e'"" [2025-09-08 12:48:28][351285623974708][828 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:48:28][351285623974708][828 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285623974708\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8587\"}'\'' -e'"" [2025-09-08 12:48:33][351285623974708][5171 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cd6a4a93-3d45-4ea3-a8aa-a882fe13be54","id":"QR_cd6a4a93-3d45-4ea3-a8aa-a882fe13be54","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:48:33][351285623974708][5327 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-09-08 12:48:33][351285623974708][5327 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-09-08 12:48:33][351285623974708][5328 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:50:03][350805650674219][1 ms][INFO] === Request start === [2025-09-08 12:50:03][350805650674219][1 ms][DEBUG] START check_scloud [2025-09-08 12:50:03][350805650674219][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:50:04][350805650674219][295 ms][DEBUG] SU: done in 293 ms; outu0_a118 7212 18958 24860132 217784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:50:04][350805650674219][295 ms][DEBUG] targetPkg: running [2025-09-08 12:50:04][350805650674219][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-08 12:50:04][350805650674219][295 ms][DEBUG] START check_boot_completed [2025-09-08 12:50:04][350805650674219][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:50:04][350805650674219][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:50:04][350805650674219][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:50:04][350805650674219][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:50:04][350805650674219][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:50:04][350805650674219][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:50:04][350805650674219][498 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2905\nsuccessfulTxPacketsPerSecond: 1.0013606528472243\nretriedTxPackets: 617\nretriedTxPacketsPerSecond: 0.2295477908520215\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2620\nsuccessfulRxPacketsPerSecond: 0.8583091310119065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:50:04][350805650674219][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:50:04][350805650674219][795 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=195 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 195.331/195.331/195.331/0.000 ms\n [2025-09-08 12:50:04][350805650674219][795 ms][DEBUG] check_internet: online [2025-09-08 12:50:04][350805650674219][795 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:50:04][350805650674219][795 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650674219\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9988\"}'\'' -e'"" [2025-09-08 12:50:04][350805650674219][795 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:50:04][350805650674219][795 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650674219\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9988\"}'\'' -e'"" [2025-09-08 12:50:09][350805650674219][5465 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4aedf850-15d4-4e1d-8b5e-b7666b31f986","id":"QR_4aedf850-15d4-4e1d-8b5e-b7666b31f986","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:50:09][350805650674219][5621 ms][DEBUG] proc_open done in 4826 ms; code=255; res.len=3343 [2025-09-08 12:50:09][350805650674219][5621 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-08 12:50:09][350805650674219][5622 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:50:11][350805650674219][0 ms][INFO] === Request start === [2025-09-08 12:50:11][350805650674219][1 ms][DEBUG] START check_scloud [2025-09-08 12:50:11][350805650674219][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:50:12][350805650674219][293 ms][DEBUG] SU: done in 293 ms; outu0_a118 7212 18958 24980204 229652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:50:12][350805650674219][293 ms][DEBUG] targetPkg: running [2025-09-08 12:50:12][350805650674219][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-08 12:50:12][350805650674219][294 ms][DEBUG] START check_boot_completed [2025-09-08 12:50:12][350805650674219][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:50:12][350805650674219][340 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:50:12][350805650674219][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:50:12][350805650674219][403 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:50:12][350805650674219][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:50:12][350805650674219][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:50:12][350805650674219][528 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2905\nsuccessfulTxPacketsPerSecond: 1.0013606528472243\nretriedTxPackets: 617\nretriedTxPacketsPerSecond: 0.2295477908520215\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2620\nsuccessfulRxPacketsPerSecond: 0.8583091310119065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:50:12][350805650674219][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:50:12][350805650674219][918 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=234 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 234.846/234.846/234.846/0.000 ms\n [2025-09-08 12:50:12][350805650674219][918 ms][DEBUG] check_internet: online [2025-09-08 12:50:12][350805650674219][918 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:50:12][350805650674219][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650674219\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2628\"}'\'' -e'"" [2025-09-08 12:50:12][350805650674219][919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:50:12][350805650674219][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650674219\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2628\"}'\'' -e'"" [2025-09-08 12:50:18][350805650674219][6057 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1169b82c-355a-4769-905e-84c869d10d8f","id":"QR_1169b82c-355a-4769-905e-84c869d10d8f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:50:18][350805650674219][6214 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 12:50:18][350805650674219][6214 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 12:50:18][350805650674219][6214 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:52:03][350517922547525][0 ms][INFO] === Request start === [2025-09-08 12:52:03][350517922547525][1 ms][DEBUG] START check_scloud [2025-09-08 12:52:03][350517922547525][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:52:03][350517922547525][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 7212 18958 25112300 241692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:52:03][350517922547525][285 ms][DEBUG] targetPkg: running [2025-09-08 12:52:03][350517922547525][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-08 12:52:03][350517922547525][285 ms][DEBUG] START check_boot_completed [2025-09-08 12:52:03][350517922547525][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:52:03][350517922547525][316 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:52:03][350517922547525][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:52:03][350517922547525][363 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:52:03][350517922547525][363 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:52:03][350517922547525][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:52:04][350517922547525][473 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2905\nsuccessfulTxPacketsPerSecond: 1.0013606528472243\nretriedTxPackets: 617\nretriedTxPacketsPerSecond: 0.2295477908520215\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2620\nsuccessfulRxPacketsPerSecond: 0.8583091310119065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:52:04][350517922547525][473 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:52:04][350517922547525][816 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=209 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 209.687/209.687/209.687/0.000 ms\n [2025-09-08 12:52:04][350517922547525][817 ms][DEBUG] check_internet: online [2025-09-08 12:52:04][350517922547525][817 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:52:04][350517922547525][817 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350517922547525\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6601\"}'\'' -e'"" [2025-09-08 12:52:04][350517922547525][817 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:52:04][350517922547525][817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350517922547525\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6601\"}'\'' -e'"" [2025-09-08 12:52:08][350517922547525][4737 ms][DEBUG] proc_open done in 3920 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 12:52:08][350517922547525][4737 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-09-08 12:52:08][350517922547525][4737 ms][WARN] Detected error: Process with pid 7212 either refused to load frida-agent, or terminated during injectionProcess with pid 7212 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 12:52:08][350517922547525][4737 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 12:52:08][350517922547525][4987 ms][DEBUG] SU: done in 250 ms; outsystem 19215 18958 12835172 177424 ep_poll 0 S system_server\n [2025-09-08 12:52:08][350517922547525][4987 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 12:52:08][350517922547525][5128 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 12:52:08][350517922547525][5128 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 12:52:08][350517922547525][5128 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 12:52:08][350517922547525][5254 ms][DEBUG] SU: done in 126 ms; out [2025-09-08 12:52:08][350517922547525][5254 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 12:52:09][350517922547525][5409 ms][DEBUG] SU: done in 155 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 12:52:11][350517922547525][7424 ms][DEBUG] START check_boot_completed [2025-09-08 12:52:11][350517922547525][7424 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:52:11][350517922547525][7471 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:52:11][350517922547525][7471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:52:11][350517922547525][7518 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:52:11][350517922547525][7518 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 12:52:14][350517922547525][10533 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 12:52:14][350517922547525][10533 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350517922547525\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6601\"}'\'' -e'"" [2025-09-08 12:52:18][350517922547525][15000 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb3cf8e1-7417-4835-b541-abedf6091411","id":"QR_cb3cf8e1-7417-4835-b541-abedf6091411","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:52:18][350517922547525][15157 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-09-08 12:52:18][350517922547525][15157 ms][DEBUG] END runCmdUntilRes#2 in 4624 ms [2025-09-08 12:52:18][350517922547525][15157 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:52:21][350517922547525][1 ms][INFO] === Request start === [2025-09-08 12:52:21][350517922547525][1 ms][DEBUG] START check_scloud [2025-09-08 12:52:21][350517922547525][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:52:21][350517922547525][245 ms][DEBUG] SU: done in 243 ms; outu0_a118 8665 18958 23752416 124708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:52:21][350517922547525][245 ms][DEBUG] targetPkg: running [2025-09-08 12:52:21][350517922547525][245 ms][DEBUG] END check_scloud in 244 ms [2025-09-08 12:52:21][350517922547525][245 ms][DEBUG] START check_boot_completed [2025-09-08 12:52:21][350517922547525][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:52:21][350517922547525][291 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:52:21][350517922547525][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:52:21][350517922547525][354 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 12:52:21][350517922547525][354 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 12:52:21][350517922547525][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:52:21][350517922547525][463 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2905\nsuccessfulTxPacketsPerSecond: 1.0013606528472243\nretriedTxPackets: 617\nretriedTxPacketsPerSecond: 0.2295477908520215\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2620\nsuccessfulRxPacketsPerSecond: 0.8583091310119065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:52:21][350517922547525][463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:52:22][350517922547525][1229 ms][DEBUG] SU: done in 766 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.690/200.690/200.690/0.000 ms\n [2025-09-08 12:52:22][350517922547525][1229 ms][DEBUG] check_internet: online [2025-09-08 12:52:22][350517922547525][1229 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:52:22][350517922547525][1229 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350517922547525\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9019\"}'\'' -e'"" [2025-09-08 12:52:22][350517922547525][1229 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:52:22][350517922547525][1229 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350517922547525\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9019\"}'\'' -e'"" [2025-09-08 12:52:27][350517922547525][6368 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a89c396-c5c8-4169-aaf7-3aaa725c9753","id":"QR_2a89c396-c5c8-4169-aaf7-3aaa725c9753","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:52:27][350517922547525][6524 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 12:52:27][350517922547525][6524 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 12:52:27][350517922547525][6524 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:52:31][350299945172504][0 ms][INFO] === Request start === [2025-09-08 12:52:31][350299945172504][1 ms][DEBUG] START check_scloud [2025-09-08 12:52:31][350299945172504][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:52:32][350299945172504][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 8665 18958 23941044 138060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:52:32][350299945172504][247 ms][DEBUG] targetPkg: running [2025-09-08 12:52:32][350299945172504][247 ms][DEBUG] END check_scloud in 246 ms [2025-09-08 12:52:32][350299945172504][247 ms][DEBUG] START check_boot_completed [2025-09-08 12:52:32][350299945172504][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:52:32][350299945172504][293 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:52:32][350299945172504][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:52:32][350299945172504][341 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:52:32][350299945172504][341 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 12:52:32][350299945172504][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:52:32][350299945172504][481 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2905\nsuccessfulTxPacketsPerSecond: 1.0013606528472243\nretriedTxPackets: 617\nretriedTxPacketsPerSecond: 0.2295477908520215\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2620\nsuccessfulRxPacketsPerSecond: 0.8583091310119065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:52:32][350299945172504][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:52:32][350299945172504][825 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=238 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 238.555/238.555/238.555/0.000 ms\n [2025-09-08 12:52:32][350299945172504][825 ms][DEBUG] check_internet: online [2025-09-08 12:52:32][350299945172504][825 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:52:32][350299945172504][826 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299945172504\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2584\"}'\'' -e'"" [2025-09-08 12:52:32][350299945172504][826 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:52:32][350299945172504][826 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299945172504\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2584\"}'\'' -e'"" [2025-09-08 12:52:35][350299945172504][4105 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_75a36784-c5ad-4952-92a4-edafe4708b73","id":"QR_75a36784-c5ad-4952-92a4-edafe4708b73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:52:36][350299945172504][4261 ms][DEBUG] proc_open done in 3436 ms; code=255; res.len=3343 [2025-09-08 12:52:36][350299945172504][4261 ms][DEBUG] END runCmdUntilRes#1 in 3436 ms [2025-09-08 12:52:36][350299945172504][4261 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:52:38][350299945172504][0 ms][INFO] === Request start === [2025-09-08 12:52:38][350299945172504][1 ms][DEBUG] START check_scloud [2025-09-08 12:52:38][350299945172504][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:52:38][350299945172504][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 8665 18958 24065048 149892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:52:38][350299945172504][287 ms][DEBUG] targetPkg: running [2025-09-08 12:52:38][350299945172504][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-08 12:52:38][350299945172504][287 ms][DEBUG] START check_boot_completed [2025-09-08 12:52:38][350299945172504][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:52:38][350299945172504][333 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:52:38][350299945172504][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:52:38][350299945172504][411 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 12:52:38][350299945172504][411 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-08 12:52:38][350299945172504][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 12:52:38][350299945172504][567 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2905\nsuccessfulTxPacketsPerSecond: 1.0013606528472243\nretriedTxPackets: 617\nretriedTxPacketsPerSecond: 0.2295477908520215\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2620\nsuccessfulRxPacketsPerSecond: 0.8583091310119065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 12:52:38][350299945172504][568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 12:52:39][350299945172504][912 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=208 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 208.891/208.891/208.891/0.000 ms\n [2025-09-08 12:52:39][350299945172504][912 ms][DEBUG] check_internet: online [2025-09-08 12:52:39][350299945172504][912 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:52:39][350299945172504][912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299945172504\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8243\"}'\'' -e'"" [2025-09-08 12:52:39][350299945172504][912 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:52:39][350299945172504][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299945172504\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8243\"}'\'' -e'"" [2025-09-08 12:52:43][350299945172504][5253 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74315c01-38ef-4a38-8a3e-857bf0dd0d6a","id":"QR_74315c01-38ef-4a38-8a3e-857bf0dd0d6a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:52:43][350299945172504][5410 ms][DEBUG] proc_open done in 4497 ms; code=255; res.len=3343 [2025-09-08 12:52:43][350299945172504][5410 ms][DEBUG] END runCmdUntilRes#1 in 4497 ms [2025-09-08 12:52:43][350299945172504][5410 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:55:04][350915068368740][1 ms][INFO] === Request start === [2025-09-08 12:55:04][350915068368740][1 ms][DEBUG] START check_scloud [2025-09-08 12:55:04][350915068368740][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:55:05][350915068368740][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 8665 18958 24104852 161268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:55:05][350915068368740][290 ms][DEBUG] targetPkg: running [2025-09-08 12:55:05][350915068368740][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 12:55:05][350915068368740][291 ms][DEBUG] START check_boot_completed [2025-09-08 12:55:05][350915068368740][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:55:05][350915068368740][337 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 12:55:05][350915068368740][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:55:05][350915068368740][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:55:05][350915068368740][384 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:55:05][350915068368740][384 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:55:05][350915068368740][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915068368740\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4338\"}'\'' -e'"" [2025-09-08 12:55:05][350915068368740][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:55:05][350915068368740][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915068368740\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4338\"}'\'' -e'"" [2025-09-08 12:55:10][350915068368740][5711 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5820ab9e-af1c-4e00-beb0-141edf273f08","id":"QR_5820ab9e-af1c-4e00-beb0-141edf273f08","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:55:10][350915068368740][5867 ms][DEBUG] proc_open done in 5483 ms; code=255; res.len=3343 [2025-09-08 12:55:10][350915068368740][5867 ms][DEBUG] END runCmdUntilRes#1 in 5483 ms [2025-09-08 12:55:10][350915068368740][5867 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:55:14][350915068368740][0 ms][INFO] === Request start === [2025-09-08 12:55:14][350915068368740][1 ms][DEBUG] START check_scloud [2025-09-08 12:55:14][350915068368740][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:55:14][350915068368740][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 8665 18958 24255708 172152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:55:14][350915068368740][311 ms][DEBUG] targetPkg: running [2025-09-08 12:55:14][350915068368740][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 12:55:14][350915068368740][312 ms][DEBUG] START check_boot_completed [2025-09-08 12:55:14][350915068368740][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:55:14][350915068368740][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 12:55:14][350915068368740][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:55:14][350915068368740][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:55:14][350915068368740][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 12:55:14][350915068368740][405 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:55:14][350915068368740][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915068368740\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4207\"}'\'' -e'"" [2025-09-08 12:55:14][350915068368740][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:55:14][350915068368740][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915068368740\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4207\"}'\'' -e'"" [2025-09-08 12:55:18][350915068368740][4185 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a145c9be-7a68-45cf-94a0-0e6dd7dbf20b","id":"QR_a145c9be-7a68-45cf-94a0-0e6dd7dbf20b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:55:18][350915068368740][4341 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-09-08 12:55:18][350915068368740][4341 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-09-08 12:55:18][350915068368740][4341 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:57:03][352590523784738][0 ms][INFO] === Request start === [2025-09-08 12:57:03][352590523784738][1 ms][DEBUG] START check_scloud [2025-09-08 12:57:03][352590523784738][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:57:03][352590523784738][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 8665 18958 24344988 184180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:57:03][352590523784738][273 ms][DEBUG] targetPkg: running [2025-09-08 12:57:03][352590523784738][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-08 12:57:03][352590523784738][273 ms][DEBUG] START check_boot_completed [2025-09-08 12:57:03][352590523784738][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:57:03][352590523784738][304 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 12:57:03][352590523784738][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:57:03][352590523784738][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:57:03][352590523784738][351 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 12:57:03][352590523784738][351 ms][DEBUG] rawBody.length=1150 [2025-09-08 12:57:03][352590523784738][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590523784738\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6914\"}'\'' -e'"" [2025-09-08 12:57:03][352590523784738][351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:57:03][352590523784738][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590523784738\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6914\"}'\'' -e'"" [2025-09-08 12:57:09][352590523784738][6302 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd8710f4-3b02-4d12-988c-bf5aa870e094","id":"QR_fd8710f4-3b02-4d12-988c-bf5aa870e094","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:57:09][352590523784738][6459 ms][DEBUG] proc_open done in 6108 ms; code=255; res.len=3343 [2025-09-08 12:57:09][352590523784738][6459 ms][DEBUG] END runCmdUntilRes#1 in 6108 ms [2025-09-08 12:57:09][352590523784738][6459 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 12:57:12][352590523784738][1 ms][INFO] === Request start === [2025-09-08 12:57:12][352590523784738][1 ms][DEBUG] START check_scloud [2025-09-08 12:57:12][352590523784738][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 12:57:13][352590523784738][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 8665 18958 24481444 195096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 12:57:13][352590523784738][302 ms][DEBUG] targetPkg: running [2025-09-08 12:57:13][352590523784738][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 12:57:13][352590523784738][302 ms][DEBUG] START check_boot_completed [2025-09-08 12:57:13][352590523784738][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 12:57:13][352590523784738][347 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 12:57:13][352590523784738][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 12:57:13][352590523784738][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 12:57:13][352590523784738][394 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 12:57:13][352590523784738][394 ms][DEBUG] rawBody.length=1160 [2025-09-08 12:57:13][352590523784738][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590523784738\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5914\"}'\'' -e'"" [2025-09-08 12:57:13][352590523784738][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 12:57:13][352590523784738][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590523784738\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5914\"}'\'' -e'"" [2025-09-08 12:57:18][352590523784738][5237 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc9efc66-d3f3-42af-bac1-5989b4496791","id":"QR_fc9efc66-d3f3-42af-bac1-5989b4496791","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 12:57:18][352590523784738][5393 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-08 12:57:18][352590523784738][5393 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-08 12:57:18][352590523784738][5393 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:00:05][353600811545326][1 ms][INFO] === Request start === [2025-09-08 13:00:05][353600811545326][1 ms][DEBUG] START check_scloud [2025-09-08 13:00:05][353600811545326][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:00:05][353600811545326][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 8665 18958 24590208 207784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:00:05][353600811545326][306 ms][DEBUG] targetPkg: running [2025-09-08 13:00:05][353600811545326][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 13:00:05][353600811545326][306 ms][DEBUG] START check_boot_completed [2025-09-08 13:00:05][353600811545326][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:00:05][353600811545326][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:00:05][353600811545326][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:00:05][353600811545326][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:00:05][353600811545326][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:00:05][353600811545326][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:00:05][353600811545326][509 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3389\nsuccessfulTxPacketsPerSecond: 0.559697089237969\nretriedTxPackets: 747\nretriedTxPacketsPerSecond: 0.1382384377033538\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3035\nsuccessfulRxPacketsPerSecond: 0.4855203665678768\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:00:05][353600811545326][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:00:06][353600811545326][1759 ms][DEBUG] SU: done in 1249 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.396/202.396/202.396/0.000 ms\n [2025-09-08 13:00:06][353600811545326][1759 ms][DEBUG] check_internet: online [2025-09-08 13:00:06][353600811545326][1759 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:00:06][353600811545326][1759 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600811545326\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1458\"}'\'' -e'"" [2025-09-08 13:00:06][353600811545326][1759 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:00:06][353600811545326][1759 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600811545326\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1458\"}'\'' -e'"" [2025-09-08 13:00:12][353600811545326][6914 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dee8573d-fbb3-49ab-9821-960cad72f3de","id":"QR_dee8573d-fbb3-49ab-9821-960cad72f3de","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:00:12][353600811545326][7070 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 13:00:12][353600811545326][7070 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 13:00:12][353600811545326][7070 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:00:15][353600811545326][0 ms][INFO] === Request start === [2025-09-08 13:00:15][353600811545326][1 ms][DEBUG] START check_scloud [2025-09-08 13:00:15][353600811545326][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:00:16][353600811545326][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 8665 18958 24747144 216464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:00:16][353600811545326][319 ms][DEBUG] targetPkg: running [2025-09-08 13:00:16][353600811545326][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 13:00:16][353600811545326][320 ms][DEBUG] START check_boot_completed [2025-09-08 13:00:16][353600811545326][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:00:16][353600811545326][366 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:00:16][353600811545326][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:00:16][353600811545326][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:00:16][353600811545326][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:00:16][353600811545326][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:00:16][353600811545326][522 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3389\nsuccessfulTxPacketsPerSecond: 0.559697089237969\nretriedTxPackets: 747\nretriedTxPacketsPerSecond: 0.1382384377033538\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3035\nsuccessfulRxPacketsPerSecond: 0.4855203665678768\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:00:16][353600811545326][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:00:16][353600811545326][850 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=217 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 217.307/217.307/217.307/0.000 ms\n [2025-09-08 13:00:16][353600811545326][850 ms][DEBUG] check_internet: online [2025-09-08 13:00:16][353600811545326][850 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:00:16][353600811545326][850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600811545326\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2043\"}'\'' -e'"" [2025-09-08 13:00:16][353600811545326][850 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:00:16][353600811545326][850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600811545326\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2043\"}'\'' -e'"" [2025-09-08 13:00:20][353600811545326][4724 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c58182c8-70b6-4094-bbf7-f78700ba3be8","id":"QR_c58182c8-70b6-4094-bbf7-f78700ba3be8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:00:20][353600811545326][4880 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-09-08 13:00:20][353600811545326][4880 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-08 13:00:20][353600811545326][4880 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:00:22][351240643667493][0 ms][INFO] === Request start === [2025-09-08 13:00:22][351240643667493][1 ms][DEBUG] START check_scloud [2025-09-08 13:00:22][351240643667493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:00:22][351240643667493][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 8665 18958 24879504 218256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:00:22][351240643667493][260 ms][DEBUG] targetPkg: running [2025-09-08 13:00:22][351240643667493][260 ms][DEBUG] END check_scloud in 260 ms [2025-09-08 13:00:22][351240643667493][260 ms][DEBUG] START check_boot_completed [2025-09-08 13:00:22][351240643667493][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:00:22][351240643667493][291 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:00:22][351240643667493][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:00:22][351240643667493][338 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:00:22][351240643667493][338 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:00:22][351240643667493][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:00:22][351240643667493][448 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3389\nsuccessfulTxPacketsPerSecond: 0.559697089237969\nretriedTxPackets: 747\nretriedTxPacketsPerSecond: 0.1382384377033538\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3035\nsuccessfulRxPacketsPerSecond: 0.4855203665678768\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:00:22][351240643667493][448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:00:23][351240643667493][807 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.519/218.519/218.519/0.000 ms\n [2025-09-08 13:00:23][351240643667493][807 ms][DEBUG] check_internet: online [2025-09-08 13:00:23][351240643667493][807 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:00:23][351240643667493][807 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643667493\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3238\"}'\'' -e'"" [2025-09-08 13:00:23][351240643667493][808 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:00:23][351240643667493][808 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643667493\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3238\"}'\'' -e'"" [2025-09-08 13:00:26][351240643667493][4056 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_541dfccc-2b2f-47ad-a43a-21e2eadcb383","id":"QR_541dfccc-2b2f-47ad-a43a-21e2eadcb383","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:00:26][351240643667493][4212 ms][DEBUG] proc_open done in 3404 ms; code=255; res.len=3343 [2025-09-08 13:00:26][351240643667493][4212 ms][DEBUG] END runCmdUntilRes#1 in 3404 ms [2025-09-08 13:00:26][351240643667493][4212 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:00:29][351240643667493][0 ms][INFO] === Request start === [2025-09-08 13:00:29][351240643667493][1 ms][DEBUG] START check_scloud [2025-09-08 13:00:29][351240643667493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:00:29][351240643667493][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 8665 18958 25036408 229344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:00:29][351240643667493][295 ms][DEBUG] targetPkg: running [2025-09-08 13:00:29][351240643667493][295 ms][DEBUG] END check_scloud in 295 ms [2025-09-08 13:00:29][351240643667493][295 ms][DEBUG] START check_boot_completed [2025-09-08 13:00:29][351240643667493][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:00:29][351240643667493][340 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 13:00:29][351240643667493][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:00:29][351240643667493][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:00:29][351240643667493][387 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 13:00:29][351240643667493][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:00:29][351240643667493][481 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3389\nsuccessfulTxPacketsPerSecond: 0.559697089237969\nretriedTxPackets: 747\nretriedTxPacketsPerSecond: 0.1382384377033538\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3035\nsuccessfulRxPacketsPerSecond: 0.4855203665678768\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:00:29][351240643667493][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:00:29][351240643667493][794 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=209 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 209.404/209.404/209.404/0.000 ms\n [2025-09-08 13:00:29][351240643667493][794 ms][DEBUG] check_internet: online [2025-09-08 13:00:29][351240643667493][794 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:00:29][351240643667493][794 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643667493\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7938\"}'\'' -e'"" [2025-09-08 13:00:29][351240643667493][794 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:00:29][351240643667493][794 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643667493\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7938\"}'\'' -e'"" [2025-09-08 13:00:33][351240643667493][4636 ms][DEBUG] proc_open done in 3842 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 13:00:33][351240643667493][4636 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-09-08 13:00:33][351240643667493][4636 ms][WARN] Detected error: Process with pid 8665 either refused to load frida-agent, or terminated during injectionProcess with pid 8665 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 13:00:33][351240643667493][4636 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 13:00:33][351240643667493][4886 ms][DEBUG] SU: done in 250 ms; outsystem 19215 18958 12835172 180700 ep_poll 0 S system_server\n [2025-09-08 13:00:33][351240643667493][4886 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 13:00:34][351240643667493][5027 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 13:00:34][351240643667493][5027 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 13:00:34][351240643667493][5027 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 13:00:34][351240643667493][5183 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 13:00:34][351240643667493][5183 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 13:00:34][351240643667493][5340 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 13:00:36][351240643667493][7354 ms][DEBUG] START check_boot_completed [2025-09-08 13:00:36][351240643667493][7354 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:00:36][351240643667493][7401 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:00:36][351240643667493][7401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:00:36][351240643667493][7450 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 13:00:36][351240643667493][7450 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-08 13:00:39][351240643667493][10463 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 13:00:39][351240643667493][10463 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643667493\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7938\"}'\'' -e'"" [2025-09-08 13:00:44][351240643667493][15040 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a386528-daeb-470b-bc5d-55345e92f84c","id":"QR_3a386528-daeb-470b-bc5d-55345e92f84c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:00:44][351240643667493][15196 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-08 13:00:44][351240643667493][15197 ms][DEBUG] END runCmdUntilRes#2 in 4734 ms [2025-09-08 13:00:44][351240643667493][15197 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:01:03][356729400098053][0 ms][INFO] === Request start === [2025-09-08 13:01:03][356729400098053][1 ms][DEBUG] START check_scloud [2025-09-08 13:01:03][356729400098053][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:01:04][356729400098053][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 10219 18958 23843592 128148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:01:04][356729400098053][254 ms][DEBUG] targetPkg: running [2025-09-08 13:01:04][356729400098053][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-08 13:01:04][356729400098053][254 ms][DEBUG] START check_boot_completed [2025-09-08 13:01:04][356729400098053][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:01:04][356729400098053][300 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:01:04][356729400098053][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:01:04][356729400098053][363 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:01:04][356729400098053][363 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:01:04][356729400098053][363 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:01:04][356729400098053][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729400098053\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5103\"}'\'' -e'"" [2025-09-08 13:01:04][356729400098053][363 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:01:04][356729400098053][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729400098053\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5103\"}'\'' -e'"" [2025-09-08 13:01:07][356729400098053][3628 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_491da963-246e-4220-b9bd-8365ab5fb766","id":"QR_491da963-246e-4220-b9bd-8365ab5fb766","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:01:07][356729400098053][3784 ms][DEBUG] proc_open done in 3421 ms; code=255; res.len=3343 [2025-09-08 13:01:07][356729400098053][3784 ms][DEBUG] END runCmdUntilRes#1 in 3421 ms [2025-09-08 13:01:07][356729400098053][3784 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:01:09][356729400098053][0 ms][INFO] === Request start === [2025-09-08 13:01:09][356729400098053][1 ms][DEBUG] START check_scloud [2025-09-08 13:01:09][356729400098053][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:01:10][356729400098053][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 10219 18958 23942752 139232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:01:10][356729400098053][300 ms][DEBUG] targetPkg: running [2025-09-08 13:01:10][356729400098053][300 ms][DEBUG] END check_scloud in 300 ms [2025-09-08 13:01:10][356729400098053][300 ms][DEBUG] START check_boot_completed [2025-09-08 13:01:10][356729400098053][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:01:10][356729400098053][347 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:01:10][356729400098053][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:01:10][356729400098053][425 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 13:01:10][356729400098053][425 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 13:01:10][356729400098053][425 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:01:10][356729400098053][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729400098053\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8663\"}'\'' -e'"" [2025-09-08 13:01:10][356729400098053][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:01:10][356729400098053][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729400098053\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8663\"}'\'' -e'"" [2025-09-08 13:01:16][356729400098053][6267 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d5bbf51-fdbd-4e78-a0ed-a881ca7751aa","id":"QR_0d5bbf51-fdbd-4e78-a0ed-a881ca7751aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:01:16][356729400098053][6423 ms][DEBUG] proc_open done in 5998 ms; code=255; res.len=3343 [2025-09-08 13:01:16][356729400098053][6424 ms][DEBUG] END runCmdUntilRes#1 in 5998 ms [2025-09-08 13:01:16][356729400098053][6424 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:03:04][356722916593790][1 ms][INFO] === Request start === [2025-09-08 13:03:04][356722916593790][1 ms][DEBUG] START check_scloud [2025-09-08 13:03:04][356722916593790][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:03:04][356722916593790][266 ms][DEBUG] SU: done in 264 ms; outu0_a118 10219 18958 24079280 150864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:03:04][356722916593790][266 ms][DEBUG] targetPkg: running [2025-09-08 13:03:04][356722916593790][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-08 13:03:04][356722916593790][266 ms][DEBUG] START check_boot_completed [2025-09-08 13:03:04][356722916593790][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:03:04][356722916593790][312 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:03:04][356722916593790][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:03:04][356722916593790][406 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 13:03:04][356722916593790][406 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 13:03:04][356722916593790][406 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:03:04][356722916593790][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722916593790\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6723\"}'\'' -e'"" [2025-09-08 13:03:04][356722916593790][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:03:04][356722916593790][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722916593790\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6723\"}'\'' -e'"" [2025-09-08 13:03:10][356722916593790][6295 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a064aeb9-28ab-4e1f-8c33-72907815a556","id":"QR_a064aeb9-28ab-4e1f-8c33-72907815a556","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:03:11][356722916593790][6451 ms][DEBUG] proc_open done in 6045 ms; code=255; res.len=3343 [2025-09-08 13:03:11][356722916593790][6452 ms][DEBUG] END runCmdUntilRes#1 in 6045 ms [2025-09-08 13:03:11][356722916593790][6452 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:03:14][356722916593790][0 ms][INFO] === Request start === [2025-09-08 13:03:14][356722916593790][1 ms][DEBUG] START check_scloud [2025-09-08 13:03:14][356722916593790][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:03:14][356722916593790][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 10219 18958 24219768 161908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:03:14][356722916593790][258 ms][DEBUG] targetPkg: running [2025-09-08 13:03:14][356722916593790][258 ms][DEBUG] END check_scloud in 258 ms [2025-09-08 13:03:14][356722916593790][258 ms][DEBUG] START check_boot_completed [2025-09-08 13:03:14][356722916593790][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:03:14][356722916593790][305 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:03:14][356722916593790][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:03:14][356722916593790][367 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:03:14][356722916593790][367 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:03:14][356722916593790][367 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:03:14][356722916593790][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722916593790\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4287\"}'\'' -e'"" [2025-09-08 13:03:14][356722916593790][367 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:03:14][356722916593790][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722916593790\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4287\"}'\'' -e'"" [2025-09-08 13:03:18][356722916593790][4023 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2fb3d06c-fac7-462f-bd7c-c3dc8222fc46","id":"QR_2fb3d06c-fac7-462f-bd7c-c3dc8222fc46","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:03:18][356722916593790][4179 ms][DEBUG] proc_open done in 3812 ms; code=255; res.len=3343 [2025-09-08 13:03:18][356722916593790][4179 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-09-08 13:03:18][356722916593790][4179 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:07:03][350411872620088][1 ms][INFO] === Request start === [2025-09-08 13:07:03][350411872620088][1 ms][DEBUG] START check_scloud [2025-09-08 13:07:03][350411872620088][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:07:03][350411872620088][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 10219 18958 24347768 173288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:07:03][350411872620088][304 ms][DEBUG] targetPkg: running [2025-09-08 13:07:03][350411872620088][304 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 13:07:03][350411872620088][304 ms][DEBUG] START check_boot_completed [2025-09-08 13:07:03][350411872620088][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:07:03][350411872620088][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:07:03][350411872620088][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:07:03][350411872620088][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:07:03][350411872620088][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:07:03][350411872620088][382 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:07:03][350411872620088][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350411872620088\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4295\"}'\'' -e'"" [2025-09-08 13:07:03][350411872620088][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:07:03][350411872620088][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350411872620088\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4295\"}'\'' -e'"" [2025-09-08 13:07:08][350411872620088][4990 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_708e5645-ecb4-4d0a-ad60-66f9d50c90f4","id":"QR_708e5645-ecb4-4d0a-ad60-66f9d50c90f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:07:08][350411872620088][5146 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-08 13:07:08][350411872620088][5146 ms][DEBUG] END runCmdUntilRes#1 in 4765 ms [2025-09-08 13:07:08][350411872620088][5146 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:07:10][350411872620088][0 ms][INFO] === Request start === [2025-09-08 13:07:10][350411872620088][1 ms][DEBUG] START check_scloud [2025-09-08 13:07:10][350411872620088][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:07:11][350411872620088][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 10219 18958 24523008 185280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:07:11][350411872620088][302 ms][DEBUG] targetPkg: running [2025-09-08 13:07:11][350411872620088][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 13:07:11][350411872620088][302 ms][DEBUG] START check_boot_completed [2025-09-08 13:07:11][350411872620088][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:07:11][350411872620088][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:07:11][350411872620088][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:07:11][350411872620088][395 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 13:07:11][350411872620088][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:07:11][350411872620088][396 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:07:11][350411872620088][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350411872620088\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7848\"}'\'' -e'"" [2025-09-08 13:07:11][350411872620088][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:07:11][350411872620088][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350411872620088\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7848\"}'\'' -e'"" [2025-09-08 13:07:16][350411872620088][5722 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e180ce0-73f5-44a0-8672-4acf72f5c5d7","id":"QR_6e180ce0-73f5-44a0-8672-4acf72f5c5d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:07:16][350411872620088][5878 ms][DEBUG] proc_open done in 5482 ms; code=255; res.len=3343 [2025-09-08 13:07:16][350411872620088][5878 ms][DEBUG] END runCmdUntilRes#1 in 5483 ms [2025-09-08 13:07:16][350411872620088][5878 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:08:03][355490894369648][0 ms][INFO] === Request start === [2025-09-08 13:08:03][355490894369648][1 ms][DEBUG] START check_scloud [2025-09-08 13:08:03][355490894369648][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:08:03][355490894369648][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 10219 18958 24628544 196224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:08:03][355490894369648][308 ms][DEBUG] targetPkg: running [2025-09-08 13:08:03][355490894369648][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 13:08:03][355490894369648][309 ms][DEBUG] START check_boot_completed [2025-09-08 13:08:03][355490894369648][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:08:03][355490894369648][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:08:03][355490894369648][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:08:03][355490894369648][402 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 13:08:03][355490894369648][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 13:08:03][355490894369648][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:08:03][355490894369648][527 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3968\nsuccessfulTxPacketsPerSecond: 1.2643256250254904\nretriedTxPackets: 838\nretriedTxPacketsPerSecond: 0.14048062500283226\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3652\nsuccessfulRxPacketsPerSecond: 1.6631093347109498\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:08:03][355490894369648][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:08:04][355490894369648][1839 ms][DEBUG] SU: done in 1312 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.475/199.475/199.475/0.000 ms\n [2025-09-08 13:08:04][355490894369648][1839 ms][DEBUG] check_internet: online [2025-09-08 13:08:04][355490894369648][1839 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:08:04][355490894369648][1839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490894369648\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4062\"}'\'' -e'"" [2025-09-08 13:08:04][355490894369648][1839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:08:04][355490894369648][1839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490894369648\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4062\"}'\'' -e'"" [2025-09-08 13:08:08][355490894369648][5416 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_729c39ba-24b3-4132-976e-b2763e421596","id":"QR_729c39ba-24b3-4132-976e-b2763e421596","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:08:08][355490894369648][5572 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-08 13:08:08][355490894369648][5572 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-08 13:08:08][355490894369648][5572 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:08:11][355490894369648][0 ms][INFO] === Request start === [2025-09-08 13:08:11][355490894369648][1 ms][DEBUG] START check_scloud [2025-09-08 13:08:11][355490894369648][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:08:11][355490894369648][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 10219 18958 24811976 208032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:08:11][355490894369648][312 ms][DEBUG] targetPkg: running [2025-09-08 13:08:11][355490894369648][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 13:08:11][355490894369648][312 ms][DEBUG] START check_boot_completed [2025-09-08 13:08:11][355490894369648][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:08:11][355490894369648][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:08:11][355490894369648][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:08:11][355490894369648][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:08:11][355490894369648][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:08:11][355490894369648][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:08:11][355490894369648][500 ms][DEBUG] SU: done in 95 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3968\nsuccessfulTxPacketsPerSecond: 1.2643256250254904\nretriedTxPackets: 838\nretriedTxPacketsPerSecond: 0.14048062500283226\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3652\nsuccessfulRxPacketsPerSecond: 1.6631093347109498\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:08:11][355490894369648][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:08:11][355490894369648][797 ms][DEBUG] SU: done in 296 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.699/199.699/199.699/0.000 ms\n [2025-09-08 13:08:11][355490894369648][797 ms][DEBUG] check_internet: online [2025-09-08 13:08:11][355490894369648][797 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:08:11][355490894369648][797 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490894369648\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2895\"}'\'' -e'"" [2025-09-08 13:08:11][355490894369648][797 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:08:11][355490894369648][797 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490894369648\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2895\"}'\'' -e'"" [2025-09-08 13:08:16][355490894369648][5748 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f23de931-403f-46a5-a453-15a094c7018e","id":"QR_f23de931-403f-46a5-a453-15a094c7018e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:08:17][355490894369648][5904 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-08 13:08:17][355490894369648][5904 ms][DEBUG] END runCmdUntilRes#1 in 5107 ms [2025-09-08 13:08:17][355490894369648][5904 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:08:21][350290893470750][0 ms][INFO] === Request start === [2025-09-08 13:08:21][350290893470750][1 ms][DEBUG] START check_scloud [2025-09-08 13:08:21][350290893470750][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:08:21][350290893470750][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 10219 18958 24938192 218992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:08:21][350290893470750][282 ms][DEBUG] targetPkg: running [2025-09-08 13:08:21][350290893470750][282 ms][DEBUG] END check_scloud in 282 ms [2025-09-08 13:08:21][350290893470750][282 ms][DEBUG] START check_boot_completed [2025-09-08 13:08:21][350290893470750][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:08:21][350290893470750][329 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:08:21][350290893470750][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:08:21][350290893470750][391 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 13:08:21][350290893470750][391 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:08:21][350290893470750][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:08:21][350290893470750][532 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3968\nsuccessfulTxPacketsPerSecond: 1.2643256250254904\nretriedTxPackets: 838\nretriedTxPacketsPerSecond: 0.14048062500283226\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3652\nsuccessfulRxPacketsPerSecond: 1.6631093347109498\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:08:21][350290893470750][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:08:22][350290893470750][860 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.911/221.911/221.911/0.000 ms\n [2025-09-08 13:08:22][350290893470750][860 ms][DEBUG] check_internet: online [2025-09-08 13:08:22][350290893470750][860 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:08:22][350290893470750][860 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290893470750\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1701\"}'\'' -e'"" [2025-09-08 13:08:22][350290893470750][860 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:08:22][350290893470750][860 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290893470750\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1701\"}'\'' -e'"" [2025-09-08 13:08:25][350290893470750][4156 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7417fde0-2c28-4505-9547-c2c82718ee36","id":"QR_7417fde0-2c28-4505-9547-c2c82718ee36","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:08:25][350290893470750][4312 ms][DEBUG] proc_open done in 3451 ms; code=255; res.len=3343 [2025-09-08 13:08:25][350290893470750][4312 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-08 13:08:25][350290893470750][4312 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:08:27][350290893470750][0 ms][INFO] === Request start === [2025-09-08 13:08:27][350290893470750][1 ms][DEBUG] START check_scloud [2025-09-08 13:08:27][350290893470750][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:08:28][350290893470750][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 10219 18958 25088948 231040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:08:28][350290893470750][308 ms][DEBUG] targetPkg: running [2025-09-08 13:08:28][350290893470750][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 13:08:28][350290893470750][308 ms][DEBUG] START check_boot_completed [2025-09-08 13:08:28][350290893470750][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:08:28][350290893470750][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:08:28][350290893470750][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:08:28][350290893470750][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:08:28][350290893470750][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:08:28][350290893470750][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:08:28][350290893470750][558 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3968\nsuccessfulTxPacketsPerSecond: 1.2643256250254904\nretriedTxPackets: 838\nretriedTxPacketsPerSecond: 0.14048062500283226\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3652\nsuccessfulRxPacketsPerSecond: 1.6631093347109498\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:08:28][350290893470750][558 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:08:28][350290893470750][949 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=268 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 268.928/268.928/268.928/0.000 ms\n [2025-09-08 13:08:28][350290893470750][949 ms][DEBUG] check_internet: online [2025-09-08 13:08:28][350290893470750][949 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:08:28][350290893470750][949 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290893470750\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1796\"}'\'' -e'"" [2025-09-08 13:08:28][350290893470750][949 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:08:28][350290893470750][949 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290893470750\",\"model\":\"SM-F731B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1796\"}'\'' -e'"" [2025-09-08 13:08:33][350290893470750][5885 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f91a985-bf92-4ec0-9c15-46bec35c3dfb","id":"QR_4f91a985-bf92-4ec0-9c15-46bec35c3dfb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:08:33][350290893470750][6041 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-08 13:08:33][350290893470750][6041 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-08 13:08:33][350290893470750][6041 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:09:03][354360417721552][0 ms][INFO] === Request start === [2025-09-08 13:09:03][354360417721552][1 ms][DEBUG] START check_scloud [2025-09-08 13:09:03][354360417721552][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:09:03][354360417721552][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 10219 18958 25190480 242328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:09:03][354360417721552][318 ms][DEBUG] targetPkg: running [2025-09-08 13:09:03][354360417721552][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 13:09:03][354360417721552][318 ms][DEBUG] START check_boot_completed [2025-09-08 13:09:03][354360417721552][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:09:03][354360417721552][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:09:03][354360417721552][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:09:03][354360417721552][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:09:03][354360417721552][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:09:03][354360417721552][427 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:09:03][354360417721552][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360417721552\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7218\"}'\'' -e'"" [2025-09-08 13:09:03][354360417721552][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:09:03][354360417721552][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360417721552\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7218\"}'\'' -e'"" [2025-09-08 13:09:07][354360417721552][4114 ms][DEBUG] proc_open done in 3686 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 13:09:07][354360417721552][4114 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-09-08 13:09:07][354360417721552][4114 ms][WARN] Detected error: Process with pid 10219 either refused to load frida-agent, or terminated during injectionProcess with pid 10219 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 13:09:07][354360417721552][4114 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 13:09:07][354360417721552][4395 ms][DEBUG] SU: done in 281 ms; outsystem 19215 18958 12835172 175152 ep_poll 0 S system_server\n [2025-09-08 13:09:07][354360417721552][4395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 13:09:07][354360417721552][4537 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 13:09:07][354360417721552][4537 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 13:09:07][354360417721552][4537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 13:09:08][354360417721552][4661 ms][DEBUG] SU: done in 124 ms; out [2025-09-08 13:09:08][354360417721552][4661 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 13:09:08][354360417721552][4817 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 13:09:10][354360417721552][6832 ms][DEBUG] START check_boot_completed [2025-09-08 13:09:10][354360417721552][6832 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:09:10][354360417721552][6879 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:09:10][354360417721552][6879 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:09:10][354360417721552][6942 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:09:10][354360417721552][6942 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 13:09:13][354360417721552][9956 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 13:09:13][354360417721552][9956 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360417721552\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7218\"}'\'' -e'"" [2025-09-08 13:09:17][354360417721552][14424 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f32545ed-d6a7-4e4a-bc03-ce0a7cfd9e52","id":"QR_f32545ed-d6a7-4e4a-bc03-ce0a7cfd9e52","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:09:18][354360417721552][14580 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-09-08 13:09:18][354360417721552][14580 ms][DEBUG] END runCmdUntilRes#2 in 4624 ms [2025-09-08 13:09:18][354360417721552][14580 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:09:20][354360417721552][1 ms][INFO] === Request start === [2025-09-08 13:09:20][354360417721552][1 ms][DEBUG] START check_scloud [2025-09-08 13:09:20][354360417721552][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:09:20][354360417721552][233 ms][DEBUG] SU: done in 231 ms; outu0_a118 11681 18958 23840864 125152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:09:20][354360417721552][233 ms][DEBUG] targetPkg: running [2025-09-08 13:09:20][354360417721552][233 ms][DEBUG] END check_scloud in 232 ms [2025-09-08 13:09:20][354360417721552][233 ms][DEBUG] START check_boot_completed [2025-09-08 13:09:20][354360417721552][233 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:09:20][354360417721552][264 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:09:20][354360417721552][264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:09:20][354360417721552][311 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:09:20][354360417721552][311 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:09:20][354360417721552][311 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:09:20][354360417721552][311 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360417721552\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3903\"}'\'' -e'"" [2025-09-08 13:09:20][354360417721552][311 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:09:20][354360417721552][311 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360417721552\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3903\"}'\'' -e'"" [2025-09-08 13:09:25][354360417721552][5216 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d44ef649-f30e-404e-bcc5-d72da9701a81","id":"QR_d44ef649-f30e-404e-bcc5-d72da9701a81","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:09:25][354360417721552][5372 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-08 13:09:25][354360417721552][5372 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-09-08 13:09:25][354360417721552][5373 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:09:29][353684140234067][0 ms][INFO] === Request start === [2025-09-08 13:09:29][353684140234067][1 ms][DEBUG] START check_scloud [2025-09-08 13:09:29][353684140234067][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:09:30][353684140234067][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 11681 18958 24002932 138300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:09:30][353684140234067][244 ms][DEBUG] targetPkg: running [2025-09-08 13:09:30][353684140234067][244 ms][DEBUG] END check_scloud in 243 ms [2025-09-08 13:09:30][353684140234067][244 ms][DEBUG] START check_boot_completed [2025-09-08 13:09:30][353684140234067][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:09:30][353684140234067][290 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:09:30][353684140234067][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:09:30][353684140234067][353 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:09:30][353684140234067][353 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:09:30][353684140234067][353 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:09:30][353684140234067][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140234067\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7049\"}'\'' -e'"" [2025-09-08 13:09:30][353684140234067][353 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:09:30][353684140234067][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140234067\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7049\"}'\'' -e'"" [2025-09-08 13:09:33][353684140234067][3618 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2aeae0c9-c36c-415a-84c9-8fabe4681107","id":"QR_2aeae0c9-c36c-415a-84c9-8fabe4681107","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:09:33][353684140234067][3774 ms][DEBUG] proc_open done in 3420 ms; code=255; res.len=3343 [2025-09-08 13:09:33][353684140234067][3774 ms][DEBUG] END runCmdUntilRes#1 in 3421 ms [2025-09-08 13:09:33][353684140234067][3774 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:09:36][353684140234067][0 ms][INFO] === Request start === [2025-09-08 13:09:36][353684140234067][1 ms][DEBUG] START check_scloud [2025-09-08 13:09:36][353684140234067][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:09:36][353684140234067][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 11681 18958 24165912 150032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:09:36][353684140234067][257 ms][DEBUG] targetPkg: running [2025-09-08 13:09:36][353684140234067][257 ms][DEBUG] END check_scloud in 257 ms [2025-09-08 13:09:36][353684140234067][257 ms][DEBUG] START check_boot_completed [2025-09-08 13:09:36][353684140234067][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:09:36][353684140234067][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:09:36][353684140234067][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:09:36][353684140234067][366 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:09:36][353684140234067][366 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 13:09:36][353684140234067][366 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:09:36][353684140234067][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140234067\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2687\"}'\'' -e'"" [2025-09-08 13:09:36][353684140234067][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:09:36][353684140234067][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140234067\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2687\"}'\'' -e'"" [2025-09-08 13:09:41][353684140234067][5317 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e86e847a-c858-4f18-a487-ca39152b56cd","id":"QR_e86e847a-c858-4f18-a487-ca39152b56cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:09:41][353684140234067][5474 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-08 13:09:41][353684140234067][5474 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-08 13:09:41][353684140234067][5474 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:11:04][350938289807213][0 ms][INFO] === Request start === [2025-09-08 13:11:04][350938289807213][1 ms][DEBUG] START check_scloud [2025-09-08 13:11:04][350938289807213][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:11:04][350938289807213][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 11681 18958 24185092 161176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:11:04][350938289807213][296 ms][DEBUG] targetPkg: running [2025-09-08 13:11:04][350938289807213][296 ms][DEBUG] END check_scloud in 296 ms [2025-09-08 13:11:04][350938289807213][296 ms][DEBUG] START check_boot_completed [2025-09-08 13:11:04][350938289807213][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:11:04][350938289807213][327 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:11:04][350938289807213][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:11:04][350938289807213][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:11:04][350938289807213][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:11:04][350938289807213][374 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:11:04][350938289807213][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289807213\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6443\"}'\'' -e'"" [2025-09-08 13:11:04][350938289807213][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:11:04][350938289807213][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289807213\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6443\"}'\'' -e'"" [2025-09-08 13:11:08][350938289807213][4780 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fea5cb1a-d383-409d-aac7-0ac97f8f4113","id":"QR_fea5cb1a-d383-409d-aac7-0ac97f8f4113","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:11:08][350938289807213][4936 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-09-08 13:11:08][350938289807213][4936 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-08 13:11:08][350938289807213][4936 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:11:11][350938289807213][0 ms][INFO] === Request start === [2025-09-08 13:11:11][350938289807213][1 ms][DEBUG] START check_scloud [2025-09-08 13:11:11][350938289807213][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:11:11][350938289807213][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 11681 18958 24297792 171928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:11:11][350938289807213][324 ms][DEBUG] targetPkg: running [2025-09-08 13:11:11][350938289807213][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-08 13:11:11][350938289807213][324 ms][DEBUG] START check_boot_completed [2025-09-08 13:11:11][350938289807213][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:11:11][350938289807213][371 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:11:11][350938289807213][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:11:11][350938289807213][449 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 13:11:11][350938289807213][449 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 13:11:11][350938289807213][449 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:11:11][350938289807213][449 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289807213\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6664\"}'\'' -e'"" [2025-09-08 13:11:11][350938289807213][449 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:11:11][350938289807213][449 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289807213\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6664\"}'\'' -e'"" [2025-09-08 13:11:16][350938289807213][5213 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c838b77c-5ec7-49cc-8928-ad7f066ff4ed","id":"QR_c838b77c-5ec7-49cc-8928-ad7f066ff4ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:11:16][350938289807213][5369 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-08 13:11:16][350938289807213][5369 ms][DEBUG] END runCmdUntilRes#1 in 4920 ms [2025-09-08 13:11:16][350938289807213][5370 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:12:03][354916442690904][1 ms][INFO] === Request start === [2025-09-08 13:12:03][354916442690904][1 ms][DEBUG] START check_scloud [2025-09-08 13:12:03][354916442690904][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:12:03][354916442690904][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 11681 18958 24469404 183784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:12:03][354916442690904][298 ms][DEBUG] targetPkg: running [2025-09-08 13:12:03][354916442690904][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-08 13:12:03][354916442690904][298 ms][DEBUG] START check_boot_completed [2025-09-08 13:12:03][354916442690904][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:12:03][354916442690904][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:12:03][354916442690904][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:12:03][354916442690904][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:12:03][354916442690904][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:12:03][354916442690904][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:12:03][354916442690904][516 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4290\nsuccessfulTxPacketsPerSecond: 1.0693766397661983\nretriedTxPackets: 938\nretriedTxPacketsPerSecond: 0.3321045465112417\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3925\nsuccessfulRxPacketsPerSecond: 0.9066454119756899\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:12:03][354916442690904][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:12:04][354916442690904][1766 ms][DEBUG] SU: done in 1249 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.076/204.076/204.076/0.000 ms\n [2025-09-08 13:12:04][354916442690904][1766 ms][DEBUG] check_internet: online [2025-09-08 13:12:04][354916442690904][1766 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:12:04][354916442690904][1766 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442690904\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3087\"}'\'' -e'"" [2025-09-08 13:12:04][354916442690904][1766 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:12:04][354916442690904][1766 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442690904\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3087\"}'\'' -e'"" [2025-09-08 13:12:09][354916442690904][6405 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ceb461c6-a47e-4e7a-817e-8eb5aec7068c","id":"QR_ceb461c6-a47e-4e7a-817e-8eb5aec7068c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:12:09][354916442690904][6562 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-08 13:12:09][354916442690904][6562 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-08 13:12:09][354916442690904][6562 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:12:12][354916442690904][1 ms][INFO] === Request start === [2025-09-08 13:12:12][354916442690904][1 ms][DEBUG] START check_scloud [2025-09-08 13:12:12][354916442690904][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:12:12][354916442690904][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 11681 18958 24632356 194668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:12:12][354916442690904][317 ms][DEBUG] targetPkg: running [2025-09-08 13:12:12][354916442690904][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 13:12:12][354916442690904][317 ms][DEBUG] START check_boot_completed [2025-09-08 13:12:12][354916442690904][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:12:12][354916442690904][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:12:12][354916442690904][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:12:12][354916442690904][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:12:12][354916442690904][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:12:12][354916442690904][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:12:12][354916442690904][551 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4290\nsuccessfulTxPacketsPerSecond: 1.0693766397661983\nretriedTxPackets: 938\nretriedTxPacketsPerSecond: 0.3321045465112417\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3925\nsuccessfulRxPacketsPerSecond: 0.9066454119756899\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:12:12][354916442690904][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:12:13][354916442690904][926 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=275 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 275.044/275.044/275.044/0.000 ms\n [2025-09-08 13:12:13][354916442690904][926 ms][DEBUG] check_internet: online [2025-09-08 13:12:13][354916442690904][926 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:12:13][354916442690904][926 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442690904\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7264\"}'\'' -e'"" [2025-09-08 13:12:13][354916442690904][926 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:12:13][354916442690904][926 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442690904\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7264\"}'\'' -e'"" [2025-09-08 13:12:17][354916442690904][5565 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e507fa5-3819-407c-8748-8ee3056473bd","id":"QR_8e507fa5-3819-407c-8748-8ee3056473bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:12:17][354916442690904][5721 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 13:12:17][354916442690904][5721 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 13:12:17][354916442690904][5721 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:17:04][352665183708068][1 ms][INFO] === Request start === [2025-09-08 13:17:04][352665183708068][1 ms][DEBUG] START check_scloud [2025-09-08 13:17:04][352665183708068][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:17:04][352665183708068][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11681 18958 24765696 207080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:17:04][352665183708068][313 ms][DEBUG] targetPkg: running [2025-09-08 13:17:04][352665183708068][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 13:17:04][352665183708068][313 ms][DEBUG] START check_boot_completed [2025-09-08 13:17:04][352665183708068][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:17:04][352665183708068][343 ms][DEBUG] ADB: done in 30 ms; out [2025-09-08 13:17:04][352665183708068][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:17:04][352665183708068][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:17:04][352665183708068][390 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-08 13:17:04][352665183708068][390 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:17:04][352665183708068][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665183708068\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2031\"}'\'' -e'"" [2025-09-08 13:17:04][352665183708068][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:17:04][352665183708068][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665183708068\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2031\"}'\'' -e'"" [2025-09-08 13:17:08][352665183708068][4670 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3c63c54-2083-43e3-930b-e74b3c3145df","id":"QR_f3c63c54-2083-43e3-930b-e74b3c3145df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:17:08][352665183708068][4826 ms][DEBUG] proc_open done in 4435 ms; code=255; res.len=3343 [2025-09-08 13:17:08][352665183708068][4826 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-09-08 13:17:08][352665183708068][4826 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:17:11][352665183708068][0 ms][INFO] === Request start === [2025-09-08 13:17:11][352665183708068][1 ms][DEBUG] START check_scloud [2025-09-08 13:17:11][352665183708068][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:17:11][352665183708068][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 11681 18958 24947080 214664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:17:11][352665183708068][311 ms][DEBUG] targetPkg: running [2025-09-08 13:17:11][352665183708068][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 13:17:11][352665183708068][311 ms][DEBUG] START check_boot_completed [2025-09-08 13:17:11][352665183708068][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:17:11][352665183708068][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:17:11][352665183708068][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:17:11][352665183708068][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:17:11][352665183708068][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:17:11][352665183708068][420 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:17:11][352665183708068][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665183708068\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8108\"}'\'' -e'"" [2025-09-08 13:17:11][352665183708068][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:17:11][352665183708068][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665183708068\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8108\"}'\'' -e'"" [2025-09-08 13:17:16][352665183708068][5404 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ae4326e-63bf-4588-b642-63bc8a348d70","id":"QR_8ae4326e-63bf-4588-b642-63bc8a348d70","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:17:16][352665183708068][5560 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-08 13:17:16][352665183708068][5560 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-09-08 13:17:16][352665183708068][5560 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:17:22][352042195514167][0 ms][INFO] === Request start === [2025-09-08 13:17:22][352042195514167][1 ms][DEBUG] START check_scloud [2025-09-08 13:17:22][352042195514167][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:17:22][352042195514167][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 11681 18958 25106960 225124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:17:22][352042195514167][267 ms][DEBUG] targetPkg: running [2025-09-08 13:17:22][352042195514167][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-08 13:17:22][352042195514167][267 ms][DEBUG] START check_boot_completed [2025-09-08 13:17:22][352042195514167][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:17:22][352042195514167][313 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:17:22][352042195514167][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:17:22][352042195514167][376 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:17:22][352042195514167][376 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:17:22][352042195514167][376 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:17:22][352042195514167][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042195514167\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1139\"}'\'' -e'"" [2025-09-08 13:17:22][352042195514167][376 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:17:22][352042195514167][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042195514167\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1139\"}'\'' -e'"" [2025-09-08 13:17:27][352042195514167][5015 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b2ce247-4e0e-4257-8ba5-8c7bd9903ded","id":"QR_3b2ce247-4e0e-4257-8ba5-8c7bd9903ded","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:17:27][352042195514167][5171 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 13:17:27][352042195514167][5171 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 13:17:27][352042195514167][5171 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:17:30][352042195514167][0 ms][INFO] === Request start === [2025-09-08 13:17:30][352042195514167][1 ms][DEBUG] START check_scloud [2025-09-08 13:17:30][352042195514167][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:17:31][352042195514167][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 11681 18958 25224824 235928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:17:31][352042195514167][298 ms][DEBUG] targetPkg: running [2025-09-08 13:17:31][352042195514167][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-08 13:17:31][352042195514167][298 ms][DEBUG] START check_boot_completed [2025-09-08 13:17:31][352042195514167][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:17:31][352042195514167][329 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:17:31][352042195514167][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:17:31][352042195514167][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:17:31][352042195514167][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:17:31][352042195514167][377 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:17:31][352042195514167][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042195514167\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7043\"}'\'' -e'"" [2025-09-08 13:17:31][352042195514167][377 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:17:31][352042195514167][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042195514167\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7043\"}'\'' -e'"" [2025-09-08 13:17:35][352042195514167][4344 ms][DEBUG] proc_open done in 3967 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 13:17:35][352042195514167][4344 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-09-08 13:17:35][352042195514167][4344 ms][WARN] Detected error: Process with pid 11681 either refused to load frida-agent, or terminated during injectionProcess with pid 11681 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 13:17:35][352042195514167][4344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 13:17:35][352042195514167][4642 ms][DEBUG] SU: done in 298 ms; outsystem 19215 18958 12968372 205100 ep_poll 0 S system_server\n [2025-09-08 13:17:35][352042195514167][4642 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 13:17:35][352042195514167][4782 ms][DEBUG] SU: done in 139 ms; out [2025-09-08 13:17:35][352042195514167][4782 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 13:17:35][352042195514167][4782 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 13:17:35][352042195514167][4922 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 13:17:35][352042195514167][4922 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 13:17:35][352042195514167][5094 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 13:17:37][352042195514167][7109 ms][DEBUG] START check_boot_completed [2025-09-08 13:17:37][352042195514167][7109 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:17:37][352042195514167][7156 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:17:37][352042195514167][7156 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:17:38][352042195514167][7219 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:17:38][352042195514167][7219 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 13:17:41][352042195514167][10233 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 13:17:41][352042195514167][10233 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042195514167\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7043\"}'\'' -e'"" [2025-09-08 13:17:44][352042195514167][13639 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11200243-05c1-44b4-9715-90e606bd19ce","id":"QR_11200243-05c1-44b4-9715-90e606bd19ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:17:44][352042195514167][13795 ms][DEBUG] proc_open done in 3562 ms; code=255; res.len=3343 [2025-09-08 13:17:44][352042195514167][13795 ms][DEBUG] END runCmdUntilRes#2 in 3562 ms [2025-09-08 13:17:44][352042195514167][13795 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:18:03][352060488673581][0 ms][INFO] === Request start === [2025-09-08 13:18:03][352060488673581][1 ms][DEBUG] START check_scloud [2025-09-08 13:18:03][352060488673581][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:18:03][352060488673581][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 13851 18958 23837028 126620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:18:03][352060488673581][272 ms][DEBUG] targetPkg: running [2025-09-08 13:18:03][352060488673581][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-08 13:18:03][352060488673581][272 ms][DEBUG] START check_boot_completed [2025-09-08 13:18:03][352060488673581][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:18:03][352060488673581][303 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:18:03][352060488673581][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:18:04][352060488673581][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:18:04][352060488673581][350 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:18:04][352060488673581][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:18:04][352060488673581][446 ms][DEBUG] SU: done in 96 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4358\nsuccessfulTxPacketsPerSecond: 0.045914103894434434\nretriedTxPackets: 962\nretriedTxPacketsPerSecond: 0.04591410389443433\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3977\nsuccessfulRxPacketsPerSecond: 0.01836564155777383\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:18:04][352060488673581][446 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:18:05][352060488673581][1928 ms][DEBUG] SU: done in 1482 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.653/200.653/200.653/0.000 ms\n [2025-09-08 13:18:05][352060488673581][1928 ms][DEBUG] check_internet: online [2025-09-08 13:18:05][352060488673581][1928 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:18:05][352060488673581][1928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060488673581\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8072\"}'\'' -e'"" [2025-09-08 13:18:05][352060488673581][1928 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:18:05][352060488673581][1928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060488673581\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8072\"}'\'' -e'"" [2025-09-08 13:18:09][352060488673581][5927 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6dd82899-bad9-4c07-abfe-001d7222d249","id":"QR_6dd82899-bad9-4c07-abfe-001d7222d249","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:18:09][352060488673581][6083 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-09-08 13:18:09][352060488673581][6083 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-09-08 13:18:09][352060488673581][6083 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:18:12][352060488673581][0 ms][INFO] === Request start === [2025-09-08 13:18:12][352060488673581][1 ms][DEBUG] START check_scloud [2025-09-08 13:18:12][352060488673581][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:18:12][352060488673581][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 13851 18958 23929980 137676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:18:12][352060488673581][309 ms][DEBUG] targetPkg: running [2025-09-08 13:18:12][352060488673581][309 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 13:18:12][352060488673581][309 ms][DEBUG] START check_boot_completed [2025-09-08 13:18:12][352060488673581][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:18:12][352060488673581][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:18:12][352060488673581][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:18:12][352060488673581][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:18:12][352060488673581][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:18:12][352060488673581][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:18:12][352060488673581][496 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4358\nsuccessfulTxPacketsPerSecond: 0.045914103894434434\nretriedTxPackets: 962\nretriedTxPacketsPerSecond: 0.04591410389443433\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3977\nsuccessfulRxPacketsPerSecond: 0.01836564155777383\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:18:12][352060488673581][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:18:12][352060488673581][840 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=246 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 246.226/246.226/246.226/0.000 ms\n [2025-09-08 13:18:12][352060488673581][840 ms][DEBUG] check_internet: online [2025-09-08 13:18:12][352060488673581][840 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:18:12][352060488673581][841 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060488673581\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6682\"}'\'' -e'"" [2025-09-08 13:18:12][352060488673581][841 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:18:12][352060488673581][841 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060488673581\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6682\"}'\'' -e'"" [2025-09-08 13:18:17][352060488673581][5839 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a24042a7-f12d-4296-9443-7409527d05e6","id":"QR_a24042a7-f12d-4296-9443-7409527d05e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:18:18][352060488673581][5995 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-09-08 13:18:18][352060488673581][5995 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-08 13:18:18][352060488673581][5995 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:20:04][354690570269944][1 ms][INFO] === Request start === [2025-09-08 13:20:04][354690570269944][1 ms][DEBUG] START check_scloud [2025-09-08 13:20:04][354690570269944][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:20:04][354690570269944][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 13851 18958 24059880 149460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:20:04][354690570269944][305 ms][DEBUG] targetPkg: running [2025-09-08 13:20:04][354690570269944][306 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 13:20:04][354690570269944][306 ms][DEBUG] START check_boot_completed [2025-09-08 13:20:04][354690570269944][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:20:04][354690570269944][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:20:04][354690570269944][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:20:04][354690570269944][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:20:04][354690570269944][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:20:04][354690570269944][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:20:04][354690570269944][509 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4611\nsuccessfulTxPacketsPerSecond: 0.8202248648087871\nretriedTxPackets: 1044\nretriedTxPacketsPerSecond: 0.26584363207241324\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4196\nsuccessfulRxPacketsPerSecond: 0.709997017364128\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:20:04][354690570269944][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:20:05][354690570269944][1024 ms][DEBUG] SU: done in 515 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=387 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 387.079/387.079/387.079/0.000 ms\n [2025-09-08 13:20:05][354690570269944][1024 ms][DEBUG] check_internet: online [2025-09-08 13:20:05][354690570269944][1024 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:20:05][354690570269944][1024 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690570269944\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8999\"}'\'' -e'"" [2025-09-08 13:20:05][354690570269944][1024 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:20:05][354690570269944][1024 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690570269944\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8999\"}'\'' -e'"" [2025-09-08 13:20:09][354690570269944][5866 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_53efdb0f-27be-4268-ba01-4f5feb038a0c","id":"QR_53efdb0f-27be-4268-ba01-4f5feb038a0c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:20:10][354690570269944][6023 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-08 13:20:10][354690570269944][6023 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-08 13:20:10][354690570269944][6023 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:20:12][354690570269944][0 ms][INFO] === Request start === [2025-09-08 13:20:12][354690570269944][1 ms][DEBUG] START check_scloud [2025-09-08 13:20:12][354690570269944][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:20:12][354690570269944][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 13851 18958 24220784 160512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:20:12][354690570269944][298 ms][DEBUG] targetPkg: running [2025-09-08 13:20:12][354690570269944][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-08 13:20:12][354690570269944][298 ms][DEBUG] START check_boot_completed [2025-09-08 13:20:12][354690570269944][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:20:12][354690570269944][345 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:20:12][354690570269944][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:20:12][354690570269944][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:20:12][354690570269944][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:20:12][354690570269944][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:20:12][354690570269944][516 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4611\nsuccessfulTxPacketsPerSecond: 0.8202248648087871\nretriedTxPackets: 1044\nretriedTxPacketsPerSecond: 0.26584363207241324\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4196\nsuccessfulRxPacketsPerSecond: 0.709997017364128\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:20:12][354690570269944][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:20:13][354690570269944][844 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.511/242.511/242.511/0.000 ms\n [2025-09-08 13:20:13][354690570269944][844 ms][DEBUG] check_internet: online [2025-09-08 13:20:13][354690570269944][844 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:20:13][354690570269944][844 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690570269944\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3002\"}'\'' -e'"" [2025-09-08 13:20:13][354690570269944][845 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:20:13][354690570269944][845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690570269944\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3002\"}'\'' -e'"" [2025-09-08 13:20:18][354690570269944][5906 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_789d6435-3759-42fb-8353-f6988ae2d394","id":"QR_789d6435-3759-42fb-8353-f6988ae2d394","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:20:18][354690570269944][6062 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-08 13:20:18][354690570269944][6062 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-08 13:20:18][354690570269944][6062 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:22:03][354809100024278][0 ms][INFO] === Request start === [2025-09-08 13:22:03][354809100024278][1 ms][DEBUG] START check_scloud [2025-09-08 13:22:03][354809100024278][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:22:03][354809100024278][279 ms][DEBUG] SU: done in 279 ms; outu0_a118 13851 18958 24346224 172476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:22:03][354809100024278][279 ms][DEBUG] targetPkg: running [2025-09-08 13:22:03][354809100024278][279 ms][DEBUG] END check_scloud in 279 ms [2025-09-08 13:22:03][354809100024278][279 ms][DEBUG] START check_boot_completed [2025-09-08 13:22:03][354809100024278][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:22:03][354809100024278][311 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:22:03][354809100024278][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:22:03][354809100024278][373 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 13:22:03][354809100024278][373 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 13:22:03][354809100024278][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:22:04][354809100024278][498 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4611\nsuccessfulTxPacketsPerSecond: 0.8202248648087871\nretriedTxPackets: 1044\nretriedTxPacketsPerSecond: 0.26584363207241324\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4196\nsuccessfulRxPacketsPerSecond: 0.709997017364128\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:22:04][354809100024278][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:22:04][354809100024278][826 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.233/225.233/225.233/0.000 ms\n [2025-09-08 13:22:04][354809100024278][827 ms][DEBUG] check_internet: online [2025-09-08 13:22:04][354809100024278][827 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:22:04][354809100024278][827 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354809100024278\",\"model\":\"SM-G975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TEL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8762\"}'\'' -e'"" [2025-09-08 13:22:04][354809100024278][827 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:22:04][354809100024278][827 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354809100024278\",\"model\":\"SM-G975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TEL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8762\"}'\'' -e'"" [2025-09-08 13:22:08][354809100024278][5356 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_347ddffb-4e1d-442c-9695-5b22f550ac23","id":"QR_347ddffb-4e1d-442c-9695-5b22f550ac23","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:22:09][354809100024278][5513 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-08 13:22:09][354809100024278][5513 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-08 13:22:09][354809100024278][5513 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:22:11][354809100024278][1 ms][INFO] === Request start === [2025-09-08 13:22:11][354809100024278][1 ms][DEBUG] START check_scloud [2025-09-08 13:22:11][354809100024278][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:22:11][354809100024278][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 13851 18958 24499064 183384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:22:11][354809100024278][262 ms][DEBUG] targetPkg: running [2025-09-08 13:22:11][354809100024278][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-08 13:22:11][354809100024278][262 ms][DEBUG] START check_boot_completed [2025-09-08 13:22:11][354809100024278][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:22:11][354809100024278][309 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:22:11][354809100024278][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:22:11][354809100024278][387 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 13:22:11][354809100024278][387 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 13:22:11][354809100024278][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:22:11][354809100024278][496 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4611\nsuccessfulTxPacketsPerSecond: 0.8202248648087871\nretriedTxPackets: 1044\nretriedTxPacketsPerSecond: 0.26584363207241324\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4196\nsuccessfulRxPacketsPerSecond: 0.709997017364128\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:22:11][354809100024278][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:22:12][354809100024278][855 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.805/245.805/245.805/0.000 ms\n [2025-09-08 13:22:12][354809100024278][856 ms][DEBUG] check_internet: online [2025-09-08 13:22:12][354809100024278][856 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:22:12][354809100024278][856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354809100024278\",\"model\":\"SM-G975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TEL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6367\"}'\'' -e'"" [2025-09-08 13:22:12][354809100024278][856 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:22:12][354809100024278][856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354809100024278\",\"model\":\"SM-G975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TEL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6367\"}'\'' -e'"" [2025-09-08 13:22:17][354809100024278][5901 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8c42267-5ff0-456b-9ee7-4f5cf349bff1","id":"QR_e8c42267-5ff0-456b-9ee7-4f5cf349bff1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:22:17][354809100024278][6057 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-08 13:22:17][354809100024278][6057 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-08 13:22:17][354809100024278][6057 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:24:04][350013883239690][0 ms][INFO] === Request start === [2025-09-08 13:24:04][350013883239690][1 ms][DEBUG] START check_scloud [2025-09-08 13:24:04][350013883239690][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:24:04][350013883239690][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 13851 18958 24623032 194652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:24:04][350013883239690][312 ms][DEBUG] targetPkg: running [2025-09-08 13:24:04][350013883239690][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 13:24:04][350013883239690][312 ms][DEBUG] START check_boot_completed [2025-09-08 13:24:04][350013883239690][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:24:04][350013883239690][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:24:04][350013883239690][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:24:04][350013883239690][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:24:04][350013883239690][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:24:04][350013883239690][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:24:04][350013883239690][515 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4611\nsuccessfulTxPacketsPerSecond: 0.8202248648087871\nretriedTxPackets: 1044\nretriedTxPacketsPerSecond: 0.26584363207241324\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4196\nsuccessfulRxPacketsPerSecond: 0.709997017364128\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:24:04][350013883239690][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:24:06][350013883239690][2015 ms][DEBUG] SU: done in 1499 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.615/187.615/187.615/0.000 ms\n [2025-09-08 13:24:06][350013883239690][2015 ms][DEBUG] check_internet: online [2025-09-08 13:24:06][350013883239690][2015 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:24:06][350013883239690][2015 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883239690\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8017\"}'\'' -e'"" [2025-09-08 13:24:06][350013883239690][2015 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:24:06][350013883239690][2015 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883239690\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8017\"}'\'' -e'"" [2025-09-08 13:24:09][350013883239690][5592 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_20208510-bea7-45c5-8533-190d163c5e70","id":"QR_20208510-bea7-45c5-8533-190d163c5e70","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:24:09][350013883239690][5748 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-08 13:24:09][350013883239690][5748 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-08 13:24:09][350013883239690][5748 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:24:12][350013883239690][1 ms][INFO] === Request start === [2025-09-08 13:24:12][350013883239690][1 ms][DEBUG] START check_scloud [2025-09-08 13:24:12][350013883239690][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:24:12][350013883239690][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 13851 18958 24773824 206552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:24:12][350013883239690][304 ms][DEBUG] targetPkg: running [2025-09-08 13:24:12][350013883239690][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 13:24:12][350013883239690][304 ms][DEBUG] START check_boot_completed [2025-09-08 13:24:12][350013883239690][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:24:12][350013883239690][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:24:12][350013883239690][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:24:12][350013883239690][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:24:12][350013883239690][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:24:12][350013883239690][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:24:12][350013883239690][508 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4611\nsuccessfulTxPacketsPerSecond: 0.8202248648087871\nretriedTxPackets: 1044\nretriedTxPacketsPerSecond: 0.26584363207241324\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4196\nsuccessfulRxPacketsPerSecond: 0.709997017364128\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:24:12][350013883239690][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:24:12][350013883239690][835 ms][DEBUG] SU: done in 326 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=229 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 229.851/229.851/229.851/0.000 ms\n [2025-09-08 13:24:12][350013883239690][835 ms][DEBUG] check_internet: online [2025-09-08 13:24:12][350013883239690][835 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:24:12][350013883239690][835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883239690\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6555\"}'\'' -e'"" [2025-09-08 13:24:12][350013883239690][835 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:24:12][350013883239690][835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883239690\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6555\"}'\'' -e'"" [2025-09-08 13:24:17][350013883239690][5630 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68f58ed9-53cf-46b1-b7c8-26b512643856","id":"QR_68f58ed9-53cf-46b1-b7c8-26b512643856","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:24:17][350013883239690][5787 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-09-08 13:24:17][350013883239690][5787 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-08 13:24:17][350013883239690][5787 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:25:04][355707114556567][0 ms][INFO] === Request start === [2025-09-08 13:25:04][355707114556567][1 ms][DEBUG] START check_scloud [2025-09-08 13:25:04][355707114556567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:25:04][355707114556567][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 13851 18958 24921472 217964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:25:04][355707114556567][304 ms][DEBUG] targetPkg: running [2025-09-08 13:25:04][355707114556567][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 13:25:04][355707114556567][304 ms][DEBUG] START check_boot_completed [2025-09-08 13:25:04][355707114556567][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:25:04][355707114556567][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:25:04][355707114556567][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:25:05][355707114556567][384 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 13:25:05][355707114556567][385 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-08 13:25:05][355707114556567][385 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:25:05][355707114556567][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707114556567\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1194\"}'\'' -e'"" [2025-09-08 13:25:05][355707114556567][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:25:05][355707114556567][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707114556567\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1194\"}'\'' -e'"" [2025-09-08 13:25:09][355707114556567][5256 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3888dcc-ab0d-4921-8851-071f5bc3b1b4","id":"QR_e3888dcc-ab0d-4921-8851-071f5bc3b1b4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:25:10][355707114556567][5413 ms][DEBUG] proc_open done in 5028 ms; code=255; res.len=3343 [2025-09-08 13:25:10][355707114556567][5413 ms][DEBUG] END runCmdUntilRes#1 in 5028 ms [2025-09-08 13:25:10][355707114556567][5413 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:25:13][355707114556567][0 ms][INFO] === Request start === [2025-09-08 13:25:13][355707114556567][1 ms][DEBUG] START check_scloud [2025-09-08 13:25:13][355707114556567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:25:13][355707114556567][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 13851 18958 25094664 229772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:25:13][355707114556567][316 ms][DEBUG] targetPkg: running [2025-09-08 13:25:13][355707114556567][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 13:25:13][355707114556567][316 ms][DEBUG] START check_boot_completed [2025-09-08 13:25:13][355707114556567][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:25:13][355707114556567][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:25:13][355707114556567][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:25:14][355707114556567][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:25:14][355707114556567][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:25:14][355707114556567][394 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:25:14][355707114556567][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707114556567\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9034\"}'\'' -e'"" [2025-09-08 13:25:14][355707114556567][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:25:14][355707114556567][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707114556567\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9034\"}'\'' -e'"" [2025-09-08 13:25:18][355707114556567][5080 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1daaf16e-1d9f-4b7e-8c82-4cd5b2c935e5","id":"QR_1daaf16e-1d9f-4b7e-8c82-4cd5b2c935e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:25:18][355707114556567][5237 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-08 13:25:18][355707114556567][5237 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-08 13:25:18][355707114556567][5237 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:25:20][357962507587285][0 ms][INFO] === Request start === [2025-09-08 13:25:20][357962507587285][1 ms][DEBUG] START check_scloud [2025-09-08 13:25:20][357962507587285][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:25:21][357962507587285][294 ms][DEBUG] SU: done in 294 ms; outu0_a118 13851 18958 25257744 241548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:25:21][357962507587285][294 ms][DEBUG] targetPkg: running [2025-09-08 13:25:21][357962507587285][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-08 13:25:21][357962507587285][295 ms][DEBUG] START check_boot_completed [2025-09-08 13:25:21][357962507587285][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:25:21][357962507587285][341 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:25:21][357962507587285][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:25:21][357962507587285][404 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:25:21][357962507587285][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:25:21][357962507587285][404 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:25:21][357962507587285][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507587285\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2440\"}'\'' -e'"" [2025-09-08 13:25:21][357962507587285][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:25:21][357962507587285][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507587285\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2440\"}'\'' -e'"" [2025-09-08 13:25:24][357962507587285][4137 ms][DEBUG] proc_open done in 3734 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 13:25:24][357962507587285][4137 ms][DEBUG] END runCmdUntilRes#1 in 3734 ms [2025-09-08 13:25:24][357962507587285][4137 ms][WARN] Detected error: Process with pid 13851 either refused to load frida-agent, or terminated during injectionProcess with pid 13851 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 13:25:24][357962507587285][4138 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 13:25:25][357962507587285][4418 ms][DEBUG] SU: done in 281 ms; outsystem 19215 18958 12972520 201692 ep_poll 0 S system_server\n [2025-09-08 13:25:25][357962507587285][4418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 13:25:25][357962507587285][4575 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 13:25:25][357962507587285][4575 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 13:25:25][357962507587285][4575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 13:25:25][357962507587285][4700 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 13:25:25][357962507587285][4700 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 13:25:25][357962507587285][4887 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 13:25:27][357962507587285][6902 ms][DEBUG] START check_boot_completed [2025-09-08 13:25:27][357962507587285][6902 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:25:27][357962507587285][6933 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:25:27][357962507587285][6933 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:25:27][357962507587285][6980 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:25:27][357962507587285][6980 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:25:30][357962507587285][9995 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 13:25:30][357962507587285][9995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507587285\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2440\"}'\'' -e'"" [2025-09-08 13:25:34][357962507587285][13416 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0d8272f-3b8f-474a-82f7-236ddcba25be","id":"QR_a0d8272f-3b8f-474a-82f7-236ddcba25be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:25:34][357962507587285][13572 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-09-08 13:25:34][357962507587285][13572 ms][DEBUG] END runCmdUntilRes#2 in 3577 ms [2025-09-08 13:25:34][357962507587285][13573 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:25:36][357962507587285][0 ms][INFO] === Request start === [2025-09-08 13:25:36][357962507587285][1 ms][DEBUG] START check_scloud [2025-09-08 13:25:36][357962507587285][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:25:36][357962507587285][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 15513 18958 23774944 124968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:25:36][357962507587285][246 ms][DEBUG] targetPkg: running [2025-09-08 13:25:36][357962507587285][246 ms][DEBUG] END check_scloud in 245 ms [2025-09-08 13:25:36][357962507587285][246 ms][DEBUG] START check_boot_completed [2025-09-08 13:25:36][357962507587285][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:25:36][357962507587285][293 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:25:36][357962507587285][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:25:36][357962507587285][355 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:25:36][357962507587285][355 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:25:36][357962507587285][355 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:25:36][357962507587285][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507587285\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5806\"}'\'' -e'"" [2025-09-08 13:25:36][357962507587285][355 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:25:36][357962507587285][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507587285\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5806\"}'\'' -e'"" [2025-09-08 13:25:42][357962507587285][6057 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c9d4a86-e4b1-44c7-b260-2527ebaa0c1a","id":"QR_1c9d4a86-e4b1-44c7-b260-2527ebaa0c1a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:25:42][357962507587285][6213 ms][DEBUG] proc_open done in 5858 ms; code=255; res.len=3343 [2025-09-08 13:25:42][357962507587285][6213 ms][DEBUG] END runCmdUntilRes#1 in 5858 ms [2025-09-08 13:25:42][357962507587285][6213 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:26:03][351272335212882][0 ms][INFO] === Request start === [2025-09-08 13:26:03][351272335212882][1 ms][DEBUG] START check_scloud [2025-09-08 13:26:03][351272335212882][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:26:03][351272335212882][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 15513 18958 23825980 138644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:26:03][351272335212882][314 ms][DEBUG] targetPkg: running [2025-09-08 13:26:03][351272335212882][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 13:26:03][351272335212882][314 ms][DEBUG] START check_boot_completed [2025-09-08 13:26:03][351272335212882][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:26:03][351272335212882][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:26:03][351272335212882][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:26:03][351272335212882][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:26:03][351272335212882][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:26:03][351272335212882][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:26:03][351272335212882][548 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4795\nsuccessfulTxPacketsPerSecond: 0.6109120851027096\nretriedTxPackets: 1101\nretriedTxPacketsPerSecond: 0.18924993940681764\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4351\nsuccessfulRxPacketsPerSecond: 0.5146270282115216\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:26:03][351272335212882][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:26:04][351272335212882][813 ms][DEBUG] SU: done in 265 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=170 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 170.823/170.823/170.823/0.000 ms\n [2025-09-08 13:26:04][351272335212882][813 ms][DEBUG] check_internet: online [2025-09-08 13:26:04][351272335212882][813 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:26:04][351272335212882][813 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272335212882\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3424\"}'\'' -e'"" [2025-09-08 13:26:04][351272335212882][813 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:26:04][351272335212882][813 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272335212882\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3424\"}'\'' -e'"" [2025-09-08 13:26:07][351272335212882][4234 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca4ea7e0-ca07-4236-b758-fc907133abe4","id":"QR_ca4ea7e0-ca07-4236-b758-fc907133abe4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:26:07][351272335212882][4390 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-09-08 13:26:07][351272335212882][4391 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-08 13:26:07][351272335212882][4391 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:26:09][351272335212882][0 ms][INFO] === Request start === [2025-09-08 13:26:09][351272335212882][1 ms][DEBUG] START check_scloud [2025-09-08 13:26:09][351272335212882][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:26:10][351272335212882][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 15513 18958 23992900 150272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:26:10][351272335212882][290 ms][DEBUG] targetPkg: running [2025-09-08 13:26:10][351272335212882][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 13:26:10][351272335212882][290 ms][DEBUG] START check_boot_completed [2025-09-08 13:26:10][351272335212882][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:26:10][351272335212882][337 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:26:10][351272335212882][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:26:10][351272335212882][399 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:26:10][351272335212882][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:26:10][351272335212882][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:26:10][351272335212882][524 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4795\nsuccessfulTxPacketsPerSecond: 0.6109120851027096\nretriedTxPackets: 1101\nretriedTxPacketsPerSecond: 0.18924993940681764\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4351\nsuccessfulRxPacketsPerSecond: 0.5146270282115216\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:26:10][351272335212882][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:26:10][351272335212882][915 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=244 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 244.164/244.164/244.164/0.000 ms\n [2025-09-08 13:26:10][351272335212882][915 ms][DEBUG] check_internet: online [2025-09-08 13:26:10][351272335212882][915 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:26:10][351272335212882][915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272335212882\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9875\"}'\'' -e'"" [2025-09-08 13:26:10][351272335212882][915 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:26:10][351272335212882][915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272335212882\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9875\"}'\'' -e'"" [2025-09-08 13:26:15][351272335212882][5757 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b454302-1f23-4f5f-b1d2-cf2824bed851","id":"QR_5b454302-1f23-4f5f-b1d2-cf2824bed851","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:26:15][351272335212882][5913 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-08 13:26:15][351272335212882][5914 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-08 13:26:15][351272335212882][5914 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:27:03][352575630937238][1 ms][INFO] === Request start === [2025-09-08 13:27:03][352575630937238][1 ms][DEBUG] START check_scloud [2025-09-08 13:27:03][352575630937238][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:27:03][352575630937238][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 15513 18958 24097568 160840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:27:03][352575630937238][290 ms][DEBUG] targetPkg: running [2025-09-08 13:27:03][352575630937238][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 13:27:03][352575630937238][290 ms][DEBUG] START check_boot_completed [2025-09-08 13:27:03][352575630937238][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:27:03][352575630937238][320 ms][DEBUG] ADB: done in 30 ms; out [2025-09-08 13:27:03][352575630937238][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:27:03][352575630937238][367 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:27:03][352575630937238][367 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-08 13:27:03][352575630937238][367 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:27:03][352575630937238][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352575630937238\",\"model\":\"SM-N770F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6411\"}'\'' -e'"" [2025-09-08 13:27:03][352575630937238][367 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:27:03][352575630937238][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352575630937238\",\"model\":\"SM-N770F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6411\"}'\'' -e'"" [2025-09-08 13:27:08][352575630937238][4835 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91a1017c-2bd6-4dd7-b6fc-001a54ae15a8","id":"QR_91a1017c-2bd6-4dd7-b6fc-001a54ae15a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:27:08][352575630937238][4991 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-09-08 13:27:08][352575630937238][4991 ms][DEBUG] END runCmdUntilRes#1 in 4624 ms [2025-09-08 13:27:08][352575630937238][4991 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:27:10][352575630937238][0 ms][INFO] === Request start === [2025-09-08 13:27:10][352575630937238][1 ms][DEBUG] START check_scloud [2025-09-08 13:27:10][352575630937238][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:27:11][352575630937238][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 15513 18958 24276904 171680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:27:11][352575630937238][281 ms][DEBUG] targetPkg: running [2025-09-08 13:27:11][352575630937238][281 ms][DEBUG] END check_scloud in 281 ms [2025-09-08 13:27:11][352575630937238][281 ms][DEBUG] START check_boot_completed [2025-09-08 13:27:11][352575630937238][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:27:11][352575630937238][311 ms][DEBUG] ADB: done in 30 ms; out [2025-09-08 13:27:11][352575630937238][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:27:11][352575630937238][373 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 13:27:11][352575630937238][374 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 13:27:11][352575630937238][374 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:27:11][352575630937238][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352575630937238\",\"model\":\"SM-N770F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6366\"}'\'' -e'"" [2025-09-08 13:27:11][352575630937238][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:27:11][352575630937238][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352575630937238\",\"model\":\"SM-N770F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6366\"}'\'' -e'"" [2025-09-08 13:27:16][352575630937238][5513 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_daa40045-7d0b-4a33-95c7-49bc960a6323","id":"QR_daa40045-7d0b-4a33-95c7-49bc960a6323","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:27:16][352575630937238][5669 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 13:27:16][352575630937238][5669 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 13:27:16][352575630937238][5669 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:28:03][352332112968608][0 ms][INFO] === Request start === [2025-09-08 13:28:03][352332112968608][1 ms][DEBUG] START check_scloud [2025-09-08 13:28:03][352332112968608][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:28:03][352332112968608][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 15513 18958 24358940 184500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:28:03][352332112968608][262 ms][DEBUG] targetPkg: running [2025-09-08 13:28:03][352332112968608][262 ms][DEBUG] END check_scloud in 262 ms [2025-09-08 13:28:03][352332112968608][262 ms][DEBUG] START check_boot_completed [2025-09-08 13:28:03][352332112968608][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:28:03][352332112968608][293 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:28:03][352332112968608][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:28:03][352332112968608][340 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:28:03][352332112968608][340 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:28:03][352332112968608][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:28:03][352332112968608][451 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4795\nsuccessfulTxPacketsPerSecond: 0.6109120851027096\nretriedTxPackets: 1101\nretriedTxPacketsPerSecond: 0.18924993940681764\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4351\nsuccessfulRxPacketsPerSecond: 0.5146270282115216\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:28:03][352332112968608][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:28:04][352332112968608][778 ms][DEBUG] SU: done in 327 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.371/221.371/221.371/0.000 ms\n [2025-09-08 13:28:04][352332112968608][778 ms][DEBUG] check_internet: online [2025-09-08 13:28:04][352332112968608][778 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:28:04][352332112968608][778 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352332112968608\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1543\"}'\'' -e'"" [2025-09-08 13:28:04][352332112968608][778 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:28:04][352332112968608][778 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352332112968608\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1543\"}'\'' -e'"" [2025-09-08 13:28:07][352332112968608][4496 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c10e376-5648-49ac-b461-b66e25a3f84e","id":"QR_9c10e376-5648-49ac-b461-b66e25a3f84e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:28:07][352332112968608][4652 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-08 13:28:07][352332112968608][4652 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-08 13:28:07][352332112968608][4652 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:28:10][352332112968608][0 ms][INFO] === Request start === [2025-09-08 13:28:10][352332112968608][1 ms][DEBUG] START check_scloud [2025-09-08 13:28:10][352332112968608][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:28:10][352332112968608][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 15513 18958 24501540 195524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:28:10][352332112968608][309 ms][DEBUG] targetPkg: running [2025-09-08 13:28:10][352332112968608][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 13:28:10][352332112968608][309 ms][DEBUG] START check_boot_completed [2025-09-08 13:28:10][352332112968608][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:28:10][352332112968608][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:28:10][352332112968608][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:28:10][352332112968608][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:28:10][352332112968608][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:28:10][352332112968608][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:28:10][352332112968608][543 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4795\nsuccessfulTxPacketsPerSecond: 0.6109120851027096\nretriedTxPackets: 1101\nretriedTxPacketsPerSecond: 0.18924993940681764\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4351\nsuccessfulRxPacketsPerSecond: 0.5146270282115216\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:28:10][352332112968608][543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:28:11][352332112968608][918 ms][DEBUG] SU: done in 374 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=272 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 272.354/272.354/272.354/0.000 ms\n [2025-09-08 13:28:11][352332112968608][918 ms][DEBUG] check_internet: online [2025-09-08 13:28:11][352332112968608][918 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:28:11][352332112968608][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352332112968608\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6921\"}'\'' -e'"" [2025-09-08 13:28:11][352332112968608][918 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:28:11][352332112968608][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352332112968608\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6921\"}'\'' -e'"" [2025-09-08 13:28:16][352332112968608][6276 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2dec27b2-fb84-46bb-8d9b-666eff0e1b21","id":"QR_2dec27b2-fb84-46bb-8d9b-666eff0e1b21","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:28:16][352332112968608][6432 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-08 13:28:16][352332112968608][6432 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-08 13:28:16][352332112968608][6432 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:29:03][353809891584440][0 ms][INFO] === Request start === [2025-09-08 13:29:03][353809891584440][1 ms][DEBUG] START check_scloud [2025-09-08 13:29:03][353809891584440][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:29:03][353809891584440][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 15513 18958 24645988 207420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:29:03][353809891584440][277 ms][DEBUG] targetPkg: running [2025-09-08 13:29:03][353809891584440][277 ms][DEBUG] END check_scloud in 276 ms [2025-09-08 13:29:03][353809891584440][277 ms][DEBUG] START check_boot_completed [2025-09-08 13:29:03][353809891584440][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:29:03][353809891584440][308 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:29:03][353809891584440][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:29:03][353809891584440][355 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:29:03][353809891584440][355 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:29:03][353809891584440][355 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:29:03][353809891584440][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809891584440\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2422\"}'\'' -e'"" [2025-09-08 13:29:03][353809891584440][355 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:29:03][353809891584440][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809891584440\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2422\"}'\'' -e'"" [2025-09-08 13:29:08][353809891584440][4994 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4a3d014-871b-4ca4-9921-68f65f3477a3","id":"QR_b4a3d014-871b-4ca4-9921-68f65f3477a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:29:08][353809891584440][5151 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-08 13:29:08][353809891584440][5151 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-08 13:29:08][353809891584440][5151 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:29:10][353809891584440][1 ms][INFO] === Request start === [2025-09-08 13:29:10][353809891584440][1 ms][DEBUG] START check_scloud [2025-09-08 13:29:10][353809891584440][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:29:11][353809891584440][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 15513 18958 24782252 218448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:29:11][353809891584440][305 ms][DEBUG] targetPkg: running [2025-09-08 13:29:11][353809891584440][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 13:29:11][353809891584440][305 ms][DEBUG] START check_boot_completed [2025-09-08 13:29:11][353809891584440][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:29:11][353809891584440][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:29:11][353809891584440][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:29:11][353809891584440][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:29:11][353809891584440][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:29:11][353809891584440][398 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:29:11][353809891584440][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809891584440\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2808\"}'\'' -e'"" [2025-09-08 13:29:11][353809891584440][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:29:11][353809891584440][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809891584440\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2808\"}'\'' -e'"" [2025-09-08 13:29:15][353809891584440][4554 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81b8843f-e622-4eec-9d55-8f73ac7c6481","id":"QR_81b8843f-e622-4eec-9d55-8f73ac7c6481","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:29:15][353809891584440][4710 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-09-08 13:29:15][353809891584440][4710 ms][DEBUG] END runCmdUntilRes#1 in 4312 ms [2025-09-08 13:29:15][353809891584440][4710 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:34:03][352844253461714][1 ms][INFO] === Request start === [2025-09-08 13:34:03][352844253461714][1 ms][DEBUG] START check_scloud [2025-09-08 13:34:03][352844253461714][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:34:04][352844253461714][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 15513 18958 24906224 230556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:34:04][352844253461714][274 ms][DEBUG] targetPkg: running [2025-09-08 13:34:04][352844253461714][274 ms][DEBUG] END check_scloud in 273 ms [2025-09-08 13:34:04][352844253461714][275 ms][DEBUG] START check_boot_completed [2025-09-08 13:34:04][352844253461714][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:34:04][352844253461714][321 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:34:04][352844253461714][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:34:04][352844253461714][367 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:34:04][352844253461714][367 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:34:04][352844253461714][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:34:04][352844253461714][478 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5111\nsuccessfulTxPacketsPerSecond: 1.049147235862243\nretriedTxPackets: 1195\nretriedTxPacketsPerSecond: 0.31208810180712293\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4614\nsuccessfulRxPacketsPerSecond: 0.8731826678220567\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:34:04][352844253461714][478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:34:05][352844253461714][1774 ms][DEBUG] SU: done in 1295 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.149/203.149/203.149/0.000 ms\n [2025-09-08 13:34:05][352844253461714][1774 ms][DEBUG] check_internet: online [2025-09-08 13:34:05][352844253461714][1774 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:34:05][352844253461714][1774 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352844253461714\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7973\"}'\'' -e'"" [2025-09-08 13:34:05][352844253461714][1774 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:34:05][352844253461714][1774 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352844253461714\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7973\"}'\'' -e'"" [2025-09-08 13:34:09][352844253461714][5319 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e47c7538-dbf7-418e-b045-1c212b6c6c81","id":"QR_e47c7538-dbf7-418e-b045-1c212b6c6c81","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:34:09][352844253461714][5476 ms][DEBUG] proc_open done in 3701 ms; code=255; res.len=3343 [2025-09-08 13:34:09][352844253461714][5476 ms][DEBUG] END runCmdUntilRes#1 in 3701 ms [2025-09-08 13:34:09][352844253461714][5476 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:36:04][350319811212000][1 ms][INFO] === Request start === [2025-09-08 13:36:04][350319811212000][1 ms][DEBUG] START check_scloud [2025-09-08 13:36:04][350319811212000][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:36:05][350319811212000][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 15513 18958 25046740 241504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:36:05][350319811212000][298 ms][DEBUG] targetPkg: running [2025-09-08 13:36:05][350319811212000][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-08 13:36:05][350319811212000][298 ms][DEBUG] START check_boot_completed [2025-09-08 13:36:05][350319811212000][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:36:05][350319811212000][345 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:36:05][350319811212000][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:36:05][350319811212000][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:36:05][350319811212000][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:36:05][350319811212000][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:36:05][350319811212000][501 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5168\nsuccessfulTxPacketsPerSecond: 0.1892995915114078\nretriedTxPackets: 1221\nretriedTxPacketsPerSecond: 0.08634718209292286\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4653\nsuccessfulRxPacketsPerSecond: 0.1295207731393843\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:36:05][350319811212000][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:36:05][350319811212000][860 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=263 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 263.463/263.463/263.463/0.000 ms\n [2025-09-08 13:36:05][350319811212000][860 ms][DEBUG] check_internet: online [2025-09-08 13:36:05][350319811212000][860 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:36:05][350319811212000][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350319811212000\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7565\"}'\'' -e'"" [2025-09-08 13:36:05][350319811212000][861 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:36:05][350319811212000][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350319811212000\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7565\"}'\'' -e'"" [2025-09-08 13:36:09][350319811212000][4594 ms][DEBUG] proc_open done in 3733 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 13:36:09][350319811212000][4594 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-08 13:36:09][350319811212000][4594 ms][WARN] Detected error: Process with pid 15513 either refused to load frida-agent, or terminated during injectionProcess with pid 15513 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 13:36:09][350319811212000][4594 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 13:36:09][350319811212000][4859 ms][DEBUG] SU: done in 265 ms; outsystem 19215 18958 12972520 194096 ep_poll 0 S system_server\n [2025-09-08 13:36:09][350319811212000][4859 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 13:36:09][350319811212000][5000 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 13:36:09][350319811212000][5000 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 13:36:09][350319811212000][5000 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 13:36:09][350319811212000][5109 ms][DEBUG] SU: done in 109 ms; out [2025-09-08 13:36:09][350319811212000][5109 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 13:36:10][350319811212000][5249 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 13:36:12][350319811212000][7265 ms][DEBUG] START check_boot_completed [2025-09-08 13:36:12][350319811212000][7265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:36:12][350319811212000][7312 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:36:12][350319811212000][7312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:36:12][350319811212000][7358 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:36:12][350319811212000][7358 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 13:36:15][350319811212000][10373 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 13:36:15][350319811212000][10373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350319811212000\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7565\"}'\'' -e'"" [2025-09-08 13:36:20][350319811212000][16075 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ecf5b876-cfb7-48ee-8885-acc58b5d3c8f","id":"QR_ecf5b876-cfb7-48ee-8885-acc58b5d3c8f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:36:21][350319811212000][16231 ms][DEBUG] proc_open done in 5858 ms; code=255; res.len=3343 [2025-09-08 13:36:21][350319811212000][16232 ms][DEBUG] END runCmdUntilRes#2 in 5858 ms [2025-09-08 13:36:21][350319811212000][16232 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:38:07][352060480926185][1 ms][INFO] === Request start === [2025-09-08 13:38:07][352060480926185][1 ms][DEBUG] START check_scloud [2025-09-08 13:38:07][352060480926185][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:38:07][352060480926185][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 16927 18958 23726552 127784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:38:07][352060480926185][269 ms][DEBUG] targetPkg: running [2025-09-08 13:38:07][352060480926185][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-08 13:38:07][352060480926185][269 ms][DEBUG] START check_boot_completed [2025-09-08 13:38:07][352060480926185][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:38:07][352060480926185][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:38:07][352060480926185][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:38:07][352060480926185][377 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:38:07][352060480926185][377 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 13:38:07][352060480926185][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:38:07][352060480926185][487 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5168\nsuccessfulTxPacketsPerSecond: 0.1892995915114078\nretriedTxPackets: 1221\nretriedTxPacketsPerSecond: 0.08634718209292286\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4653\nsuccessfulRxPacketsPerSecond: 0.1295207731393843\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:38:07][352060480926185][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:38:08][352060480926185][768 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.682/194.682/194.682/0.000 ms\n [2025-09-08 13:38:08][352060480926185][768 ms][DEBUG] check_internet: online [2025-09-08 13:38:08][352060480926185][768 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:38:08][352060480926185][768 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060480926185\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2315\"}'\'' -e'"" [2025-09-08 13:38:08][352060480926185][768 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:38:08][352060480926185][768 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060480926185\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2315\"}'\'' -e'"" [2025-09-08 13:38:13][352060480926185][6048 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3aed693-be79-4952-9a56-28a971b0c686","id":"QR_a3aed693-be79-4952-9a56-28a971b0c686","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:38:13][352060480926185][6204 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-09-08 13:38:13][352060480926185][6204 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-08 13:38:13][352060480926185][6205 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:38:18][352432790418601][0 ms][INFO] === Request start === [2025-09-08 13:38:18][352432790418601][1 ms][DEBUG] START check_scloud [2025-09-08 13:38:18][352432790418601][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:38:18][352432790418601][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 16927 18958 23871152 138904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:38:18][352432790418601][325 ms][DEBUG] targetPkg: running [2025-09-08 13:38:18][352432790418601][325 ms][DEBUG] END check_scloud in 325 ms [2025-09-08 13:38:18][352432790418601][325 ms][DEBUG] START check_boot_completed [2025-09-08 13:38:18][352432790418601][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:38:18][352432790418601][372 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:38:18][352432790418601][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:38:18][352432790418601][434 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:38:18][352432790418601][435 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:38:18][352432790418601][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:38:18][352432790418601][559 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5168\nsuccessfulTxPacketsPerSecond: 0.1892995915114078\nretriedTxPackets: 1221\nretriedTxPacketsPerSecond: 0.08634718209292286\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4653\nsuccessfulRxPacketsPerSecond: 0.1295207731393843\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:38:18][352432790418601][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:38:18][352432790418601][950 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.040/250.040/250.040/0.000 ms\n [2025-09-08 13:38:18][352432790418601][950 ms][DEBUG] check_internet: online [2025-09-08 13:38:18][352432790418601][950 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:38:18][352432790418601][950 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432790418601\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9539\"}'\'' -e'"" [2025-09-08 13:38:18][352432790418601][950 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:38:18][352432790418601][950 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432790418601\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9539\"}'\'' -e'"" [2025-09-08 13:38:23][352432790418601][5277 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cdd78978-44f5-43bc-adeb-0c3c733cdbb2","id":"QR_cdd78978-44f5-43bc-adeb-0c3c733cdbb2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:38:23][352432790418601][5433 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-09-08 13:38:23][352432790418601][5433 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-08 13:38:23][352432790418601][5433 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:38:25][352432790418601][0 ms][INFO] === Request start === [2025-09-08 13:38:25][352432790418601][1 ms][DEBUG] START check_scloud [2025-09-08 13:38:25][352432790418601][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:38:26][352432790418601][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 16927 18958 24031992 150584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:38:26][352432790418601][321 ms][DEBUG] targetPkg: running [2025-09-08 13:38:26][352432790418601][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-08 13:38:26][352432790418601][321 ms][DEBUG] START check_boot_completed [2025-09-08 13:38:26][352432790418601][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:38:26][352432790418601][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:38:26][352432790418601][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:38:26][352432790418601][446 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 13:38:26][352432790418601][446 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 13:38:26][352432790418601][446 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:38:26][352432790418601][540 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5168\nsuccessfulTxPacketsPerSecond: 0.1892995915114078\nretriedTxPackets: 1221\nretriedTxPacketsPerSecond: 0.08634718209292286\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4653\nsuccessfulRxPacketsPerSecond: 0.1295207731393843\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:38:26][352432790418601][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:38:26][352432790418601][1118 ms][DEBUG] SU: done in 578 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.348/201.348/201.348/0.000 ms\n [2025-09-08 13:38:26][352432790418601][1118 ms][DEBUG] check_internet: online [2025-09-08 13:38:26][352432790418601][1118 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:38:26][352432790418601][1118 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432790418601\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5236\"}'\'' -e'"" [2025-09-08 13:38:26][352432790418601][1118 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:38:26][352432790418601][1118 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432790418601\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5236\"}'\'' -e'"" [2025-09-08 13:38:31][352432790418601][5757 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2eb6dd95-dfe8-4011-a455-20bb9ff4a071","id":"QR_2eb6dd95-dfe8-4011-a455-20bb9ff4a071","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:38:31][352432790418601][5913 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-08 13:38:31][352432790418601][5913 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-08 13:38:31][352432790418601][5913 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:40:03][351477979222143][0 ms][INFO] === Request start === [2025-09-08 13:40:03][351477979222143][1 ms][DEBUG] START check_scloud [2025-09-08 13:40:03][351477979222143][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:40:03][351477979222143][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 16927 18958 24156052 161892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:40:03][351477979222143][307 ms][DEBUG] targetPkg: running [2025-09-08 13:40:03][351477979222143][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 13:40:03][351477979222143][307 ms][DEBUG] START check_boot_completed [2025-09-08 13:40:03][351477979222143][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:40:03][351477979222143][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:40:03][351477979222143][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:40:03][351477979222143][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:40:03][351477979222143][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:40:03][351477979222143][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:40:04][351477979222143][494 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5284\nsuccessfulTxPacketsPerSecond: 0.3852988557288293\nretriedTxPackets: 1259\nretriedTxPacketsPerSecond: 0.1262185906697889\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4755\nsuccessfulRxPacketsPerSecond: 0.3387972696925913\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:40:04][351477979222143][494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:40:04][351477979222143][885 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=279 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 279.365/279.365/279.365/0.000 ms\n [2025-09-08 13:40:04][351477979222143][885 ms][DEBUG] check_internet: online [2025-09-08 13:40:04][351477979222143][885 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:40:04][351477979222143][885 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979222143\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3906\"}'\'' -e'"" [2025-09-08 13:40:04][351477979222143][885 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:40:04][351477979222143][885 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979222143\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3906\"}'\'' -e'"" [2025-09-08 13:40:09][351477979222143][5743 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24450600-637e-486e-a556-613758cc53e3","id":"QR_24450600-637e-486e-a556-613758cc53e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:40:09][351477979222143][5899 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-08 13:40:09][351477979222143][5899 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-08 13:40:09][351477979222143][5899 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:40:11][351477979222143][1 ms][INFO] === Request start === [2025-09-08 13:40:11][351477979222143][1 ms][DEBUG] START check_scloud [2025-09-08 13:40:11][351477979222143][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:40:12][351477979222143][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 16927 18958 24317084 173768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:40:12][351477979222143][308 ms][DEBUG] targetPkg: running [2025-09-08 13:40:12][351477979222143][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 13:40:12][351477979222143][308 ms][DEBUG] START check_boot_completed [2025-09-08 13:40:12][351477979222143][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:40:12][351477979222143][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:40:12][351477979222143][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:40:12][351477979222143][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:40:12][351477979222143][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:40:12][351477979222143][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:40:12][351477979222143][495 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5284\nsuccessfulTxPacketsPerSecond: 0.3852988557288293\nretriedTxPackets: 1259\nretriedTxPacketsPerSecond: 0.1262185906697889\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4755\nsuccessfulRxPacketsPerSecond: 0.3387972696925913\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:40:12][351477979222143][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:40:12][351477979222143][761 ms][DEBUG] SU: done in 266 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.164/164.164/164.164/0.000 ms\n [2025-09-08 13:40:12][351477979222143][761 ms][DEBUG] check_internet: online [2025-09-08 13:40:12][351477979222143][761 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:40:12][351477979222143][761 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979222143\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1506\"}'\'' -e'"" [2025-09-08 13:40:12][351477979222143][761 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:40:12][351477979222143][761 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979222143\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1506\"}'\'' -e'"" [2025-09-08 13:40:17][351477979222143][5416 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c26efd89-5e04-47b4-95b6-2e8c474003ed","id":"QR_c26efd89-5e04-47b4-95b6-2e8c474003ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:40:17][351477979222143][5572 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-08 13:40:17][351477979222143][5572 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-08 13:40:17][351477979222143][5572 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:41:04][352288967548145][0 ms][INFO] === Request start === [2025-09-08 13:41:04][352288967548145][1 ms][DEBUG] START check_scloud [2025-09-08 13:41:04][352288967548145][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:41:04][352288967548145][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 16927 18958 24457564 184844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:41:04][352288967548145][314 ms][DEBUG] targetPkg: running [2025-09-08 13:41:04][352288967548145][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 13:41:04][352288967548145][314 ms][DEBUG] START check_boot_completed [2025-09-08 13:41:04][352288967548145][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:41:04][352288967548145][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:41:04][352288967548145][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:41:04][352288967548145][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:41:04][352288967548145][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 13:41:04][352288967548145][407 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:41:04][352288967548145][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967548145\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1260\"}'\'' -e'"" [2025-09-08 13:41:04][352288967548145][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:41:04][352288967548145][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967548145\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1260\"}'\'' -e'"" [2025-09-08 13:41:07][352288967548145][3766 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b22f66e7-4af6-40a7-a1d8-0a98a06305bf","id":"QR_b22f66e7-4af6-40a7-a1d8-0a98a06305bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:41:08][352288967548145][3922 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-08 13:41:08][352288967548145][3922 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-09-08 13:41:08][352288967548145][3922 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:41:10][357950541605429][0 ms][INFO] === Request start === [2025-09-08 13:41:10][357950541605429][1 ms][DEBUG] START check_scloud [2025-09-08 13:41:10][357950541605429][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:41:10][357950541605429][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 16927 18958 24600036 196604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:41:10][357950541605429][319 ms][DEBUG] targetPkg: running [2025-09-08 13:41:10][357950541605429][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 13:41:10][357950541605429][319 ms][DEBUG] START check_boot_completed [2025-09-08 13:41:10][357950541605429][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:41:10][357950541605429][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:41:10][357950541605429][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:41:10][357950541605429][415 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 13:41:10][357950541605429][415 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 13:41:10][357950541605429][415 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:41:10][357950541605429][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950541605429\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6676\"}'\'' -e'"" [2025-09-08 13:41:10][357950541605429][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:41:10][357950541605429][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950541605429\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6676\"}'\'' -e'"" [2025-09-08 13:41:14][357950541605429][4849 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9c999a4-c170-40a1-9a37-e6d48c86a48b","id":"QR_b9c999a4-c170-40a1-9a37-e6d48c86a48b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:41:15][357950541605429][5005 ms][DEBUG] proc_open done in 4590 ms; code=255; res.len=3343 [2025-09-08 13:41:15][357950541605429][5005 ms][DEBUG] END runCmdUntilRes#1 in 4591 ms [2025-09-08 13:41:15][357950541605429][5005 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:41:17][357950541605429][0 ms][INFO] === Request start === [2025-09-08 13:41:17][357950541605429][1 ms][DEBUG] START check_scloud [2025-09-08 13:41:17][357950541605429][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:41:17][357950541605429][301 ms][DEBUG] SU: done in 301 ms; outu0_a118 16927 18958 24771180 207468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:41:17][357950541605429][301 ms][DEBUG] targetPkg: running [2025-09-08 13:41:17][357950541605429][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 13:41:17][357950541605429][302 ms][DEBUG] START check_boot_completed [2025-09-08 13:41:17][357950541605429][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:41:17][357950541605429][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:41:17][357950541605429][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:41:17][357950541605429][396 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 13:41:17][357950541605429][396 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 13:41:17][357950541605429][396 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:41:17][357950541605429][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950541605429\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2904\"}'\'' -e'"" [2025-09-08 13:41:17][357950541605429][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:41:17][357950541605429][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950541605429\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2904\"}'\'' -e'"" [2025-09-08 13:41:23][357950541605429][5597 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca88ccf5-7743-415b-bc2b-a3a8fdcdcaae","id":"QR_ca88ccf5-7743-415b-bc2b-a3a8fdcdcaae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:41:23][357950541605429][5753 ms][DEBUG] proc_open done in 5356 ms; code=255; res.len=3343 [2025-09-08 13:41:23][357950541605429][5753 ms][DEBUG] END runCmdUntilRes#1 in 5356 ms [2025-09-08 13:41:23][357950541605429][5753 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:41:28][350525791854625][0 ms][INFO] === Request start === [2025-09-08 13:41:28][350525791854625][1 ms][DEBUG] START check_scloud [2025-09-08 13:41:28][350525791854625][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:41:28][350525791854625][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 16927 18958 24928016 218332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:41:28][350525791854625][304 ms][DEBUG] targetPkg: running [2025-09-08 13:41:28][350525791854625][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 13:41:28][350525791854625][304 ms][DEBUG] START check_boot_completed [2025-09-08 13:41:28][350525791854625][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:41:29][350525791854625][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:41:29][350525791854625][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:41:29][350525791854625][429 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 13:41:29][350525791854625][429 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 13:41:29][350525791854625][429 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:41:29][350525791854625][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350525791854625\",\"model\":\"SM-A166M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9030\"}'\'' -e'"" [2025-09-08 13:41:29][350525791854625][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:41:29][350525791854625][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350525791854625\",\"model\":\"SM-A166M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9030\"}'\'' -e'"" [2025-09-08 13:41:33][350525791854625][4709 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea2d6f39-e54a-4207-91ad-ee2118fa76a9","id":"QR_ea2d6f39-e54a-4207-91ad-ee2118fa76a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:41:33][350525791854625][4865 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-09-08 13:41:33][350525791854625][4866 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-09-08 13:41:33][350525791854625][4866 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:41:36][350525791854625][0 ms][INFO] === Request start === [2025-09-08 13:41:36][350525791854625][1 ms][DEBUG] START check_scloud [2025-09-08 13:41:36][350525791854625][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:41:37][350525791854625][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 16927 18958 25056244 230560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:41:37][350525791854625][304 ms][DEBUG] targetPkg: running [2025-09-08 13:41:37][350525791854625][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 13:41:37][350525791854625][304 ms][DEBUG] START check_boot_completed [2025-09-08 13:41:37][350525791854625][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:41:37][350525791854625][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:41:37][350525791854625][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:41:37][350525791854625][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:41:37][350525791854625][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:41:37][350525791854625][397 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:41:37][350525791854625][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350525791854625\",\"model\":\"SM-A166M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9738\"}'\'' -e'"" [2025-09-08 13:41:37][350525791854625][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:41:37][350525791854625][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350525791854625\",\"model\":\"SM-A166M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9738\"}'\'' -e'"" [2025-09-08 13:41:40][350525791854625][3756 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_408b7b6b-9852-4f52-8fb8-6362dffe7c35","id":"QR_408b7b6b-9852-4f52-8fb8-6362dffe7c35","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:41:40][350525791854625][3912 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=3343 [2025-09-08 13:41:40][350525791854625][3912 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-09-08 13:41:40][350525791854625][3912 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:42:03][352469854002798][0 ms][INFO] === Request start === [2025-09-08 13:42:03][352469854002798][1 ms][DEBUG] START check_scloud [2025-09-08 13:42:03][352469854002798][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:42:04][352469854002798][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 16927 18958 25188368 242868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:42:04][352469854002798][292 ms][DEBUG] targetPkg: running [2025-09-08 13:42:04][352469854002798][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-08 13:42:04][352469854002798][292 ms][DEBUG] START check_boot_completed [2025-09-08 13:42:04][352469854002798][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:42:04][352469854002798][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:42:04][352469854002798][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:42:04][352469854002798][372 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 13:42:04][352469854002798][372 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-08 13:42:04][352469854002798][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:42:04][352469854002798][479 ms][DEBUG] SU: done in 107 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5284\nsuccessfulTxPacketsPerSecond: 0.3852988557288293\nretriedTxPackets: 1259\nretriedTxPacketsPerSecond: 0.1262185906697889\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4755\nsuccessfulRxPacketsPerSecond: 0.3387972696925913\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:42:04][352469854002798][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:42:04][352469854002798][792 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.280/214.280/214.280/0.000 ms\n [2025-09-08 13:42:04][352469854002798][792 ms][DEBUG] check_internet: online [2025-09-08 13:42:04][352469854002798][792 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:42:04][352469854002798][792 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854002798\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2030\"}'\'' -e'"" [2025-09-08 13:42:04][352469854002798][792 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:42:04][352469854002798][792 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854002798\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2030\"}'\'' -e'"" [2025-09-08 13:42:08][352469854002798][4463 ms][DEBUG] proc_open done in 3671 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 13:42:08][352469854002798][4463 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-08 13:42:08][352469854002798][4463 ms][WARN] Detected error: Process with pid 16927 either refused to load frida-agent, or terminated during injectionProcess with pid 16927 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 13:42:08][352469854002798][4463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 13:42:08][352469854002798][4761 ms][DEBUG] SU: done in 299 ms; outsystem 19215 18958 12972520 185052 ep_poll 0 S system_server\n [2025-09-08 13:42:08][352469854002798][4761 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 13:42:08][352469854002798][4900 ms][DEBUG] SU: done in 139 ms; out [2025-09-08 13:42:08][352469854002798][4900 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 13:42:08][352469854002798][4900 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 13:42:08][352469854002798][5025 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 13:42:08][352469854002798][5025 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 13:42:09][352469854002798][5166 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 13:42:11][352469854002798][7181 ms][DEBUG] START check_boot_completed [2025-09-08 13:42:11][352469854002798][7181 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:42:11][352469854002798][7228 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:42:11][352469854002798][7228 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:42:11][352469854002798][7274 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:42:11][352469854002798][7274 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 13:42:14][352469854002798][10289 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 13:42:14][352469854002798][10290 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854002798\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2030\"}'\'' -e'"" [2025-09-08 13:42:18][352469854002798][14695 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3584130-feee-42c3-bde0-552b86b1d5fc","id":"QR_e3584130-feee-42c3-bde0-552b86b1d5fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:42:18][352469854002798][14851 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-09-08 13:42:18][352469854002798][14851 ms][DEBUG] END runCmdUntilRes#2 in 4562 ms [2025-09-08 13:42:18][352469854002798][14851 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:42:21][352469854002798][1 ms][INFO] === Request start === [2025-09-08 13:42:21][352469854002798][1 ms][DEBUG] START check_scloud [2025-09-08 13:42:21][352469854002798][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:42:21][352469854002798][230 ms][DEBUG] SU: done in 228 ms; outu0_a118 18345 18958 23752348 125164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:42:21][352469854002798][230 ms][DEBUG] targetPkg: running [2025-09-08 13:42:21][352469854002798][230 ms][DEBUG] END check_scloud in 229 ms [2025-09-08 13:42:21][352469854002798][230 ms][DEBUG] START check_boot_completed [2025-09-08 13:42:21][352469854002798][230 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:42:21][352469854002798][261 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:42:21][352469854002798][261 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:42:21][352469854002798][307 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:42:21][352469854002798][308 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:42:21][352469854002798][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:42:21][352469854002798][401 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5284\nsuccessfulTxPacketsPerSecond: 0.3852988557288293\nretriedTxPackets: 1259\nretriedTxPacketsPerSecond: 0.1262185906697889\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4755\nsuccessfulRxPacketsPerSecond: 0.3387972696925913\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:42:21][352469854002798][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:42:21][352469854002798][745 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=241 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 241.045/241.045/241.045/0.000 ms\n [2025-09-08 13:42:21][352469854002798][745 ms][DEBUG] check_internet: online [2025-09-08 13:42:21][352469854002798][745 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:42:21][352469854002798][745 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854002798\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MWD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8063\"}'\'' -e'"" [2025-09-08 13:42:21][352469854002798][745 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:42:21][352469854002798][746 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854002798\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MWD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8063\"}'\'' -e'"" [2025-09-08 13:42:26][352469854002798][5260 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8305e5e5-0226-4b8d-8462-1028d62c7986","id":"QR_8305e5e5-0226-4b8d-8462-1028d62c7986","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:42:26][352469854002798][5416 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-09-08 13:42:26][352469854002798][5416 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-09-08 13:42:26][352469854002798][5416 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:43:03][350070128014775][0 ms][INFO] === Request start === [2025-09-08 13:43:03][350070128014775][1 ms][DEBUG] START check_scloud [2025-09-08 13:43:03][350070128014775][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:43:03][350070128014775][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 18345 18958 23835160 138960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:43:03][350070128014775][303 ms][DEBUG] targetPkg: running [2025-09-08 13:43:03][350070128014775][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 13:43:03][350070128014775][303 ms][DEBUG] START check_boot_completed [2025-09-08 13:43:03][350070128014775][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:43:03][350070128014775][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:43:03][350070128014775][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:43:03][350070128014775][383 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 13:43:03][350070128014775][383 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-08 13:43:03][350070128014775][383 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:43:03][350070128014775][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350070128014775\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2871\"}'\'' -e'"" [2025-09-08 13:43:03][350070128014775][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:43:03][350070128014775][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350070128014775\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2871\"}'\'' -e'"" [2025-09-08 13:43:06][350070128014775][3912 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da3002bd-cb1d-42ab-a794-118854446f04","id":"QR_da3002bd-cb1d-42ab-a794-118854446f04","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:43:07][350070128014775][4068 ms][DEBUG] proc_open done in 3685 ms; code=255; res.len=3343 [2025-09-08 13:43:07][350070128014775][4068 ms][DEBUG] END runCmdUntilRes#1 in 3685 ms [2025-09-08 13:43:07][350070128014775][4068 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:43:09][350070128014775][0 ms][INFO] === Request start === [2025-09-08 13:43:09][350070128014775][1 ms][DEBUG] START check_scloud [2025-09-08 13:43:09][350070128014775][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:43:09][350070128014775][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 18345 18958 23971424 150460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:43:09][350070128014775][297 ms][DEBUG] targetPkg: running [2025-09-08 13:43:09][350070128014775][297 ms][DEBUG] END check_scloud in 297 ms [2025-09-08 13:43:09][350070128014775][297 ms][DEBUG] START check_boot_completed [2025-09-08 13:43:09][350070128014775][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:43:09][350070128014775][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:43:09][350070128014775][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:43:09][350070128014775][407 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 13:43:09][350070128014775][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:43:09][350070128014775][407 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:43:09][350070128014775][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350070128014775\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9355\"}'\'' -e'"" [2025-09-08 13:43:09][350070128014775][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:43:09][350070128014775][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350070128014775\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9355\"}'\'' -e'"" [2025-09-08 13:43:14][350070128014775][4937 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e460d807-c4ce-4e9d-8932-a0500c6e925d","id":"QR_e460d807-c4ce-4e9d-8932-a0500c6e925d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:43:14][350070128014775][5093 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-08 13:43:14][350070128014775][5093 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-08 13:43:14][350070128014775][5093 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:44:04][358673440878488][0 ms][INFO] === Request start === [2025-09-08 13:44:04][358673440878488][1 ms][DEBUG] START check_scloud [2025-09-08 13:44:04][358673440878488][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:44:04][358673440878488][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 18345 18958 24119904 161448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:44:04][358673440878488][296 ms][DEBUG] targetPkg: running [2025-09-08 13:44:04][358673440878488][296 ms][DEBUG] END check_scloud in 296 ms [2025-09-08 13:44:04][358673440878488][297 ms][DEBUG] START check_boot_completed [2025-09-08 13:44:04][358673440878488][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:44:04][358673440878488][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:44:04][358673440878488][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:44:04][358673440878488][405 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:44:04][358673440878488][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:44:04][358673440878488][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:44:04][358673440878488][515 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5517\nsuccessfulTxPacketsPerSecond: 1.3083345967465705\nretriedTxPackets: 1327\nretriedTxPacketsPerSecond: 0.38183155613204633\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4946\nsuccessfulRxPacketsPerSecond: 1.0724974591356007\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:44:04][358673440878488][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:44:05][358673440878488][1780 ms][DEBUG] SU: done in 1265 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.663/198.663/198.663/0.000 ms\n [2025-09-08 13:44:05][358673440878488][1780 ms][DEBUG] check_internet: online [2025-09-08 13:44:05][358673440878488][1780 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:44:05][358673440878488][1780 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673440878488\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5135\"}'\'' -e'"" [2025-09-08 13:44:05][358673440878488][1780 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:44:05][358673440878488][1780 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673440878488\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5135\"}'\'' -e'"" [2025-09-08 13:44:09][358673440878488][5857 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22b9c771-ab0d-4fd0-a982-8c15755d5ce3","id":"QR_22b9c771-ab0d-4fd0-a982-8c15755d5ce3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:44:10][358673440878488][6013 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-09-08 13:44:10][358673440878488][6013 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-08 13:44:10][358673440878488][6013 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:44:12][358673440878488][0 ms][INFO] === Request start === [2025-09-08 13:44:12][358673440878488][1 ms][DEBUG] START check_scloud [2025-09-08 13:44:12][358673440878488][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:44:12][358673440878488][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 18345 18958 24248988 172388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:44:12][358673440878488][261 ms][DEBUG] targetPkg: running [2025-09-08 13:44:12][358673440878488][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-08 13:44:12][358673440878488][261 ms][DEBUG] START check_boot_completed [2025-09-08 13:44:12][358673440878488][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:44:12][358673440878488][308 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:44:12][358673440878488][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:44:12][358673440878488][401 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 13:44:12][358673440878488][401 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 13:44:12][358673440878488][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:44:12][358673440878488][558 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5517\nsuccessfulTxPacketsPerSecond: 1.3083345967465705\nretriedTxPackets: 1327\nretriedTxPacketsPerSecond: 0.38183155613204633\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4946\nsuccessfulRxPacketsPerSecond: 1.0724974591356007\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:44:12][358673440878488][558 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:44:13][358673440878488][839 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.221/163.221/163.221/0.000 ms\n [2025-09-08 13:44:13][358673440878488][839 ms][DEBUG] check_internet: online [2025-09-08 13:44:13][358673440878488][839 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:44:13][358673440878488][839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673440878488\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5772\"}'\'' -e'"" [2025-09-08 13:44:13][358673440878488][839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:44:13][358673440878488][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673440878488\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5772\"}'\'' -e'"" [2025-09-08 13:44:17][358673440878488][5525 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1daaa87-67a0-4c23-9704-652f8fc0ba60","id":"QR_b1daaa87-67a0-4c23-9704-652f8fc0ba60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:44:18][358673440878488][5681 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-08 13:44:18][358673440878488][5681 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-08 13:44:18][358673440878488][5681 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:46:03][353948921841949][1 ms][INFO] === Request start === [2025-09-08 13:46:03][353948921841949][1 ms][DEBUG] START check_scloud [2025-09-08 13:46:03][353948921841949][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:46:04][353948921841949][289 ms][DEBUG] SU: done in 287 ms; outu0_a118 18345 18958 24389468 184376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:46:04][353948921841949][289 ms][DEBUG] targetPkg: running [2025-09-08 13:46:04][353948921841949][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-08 13:46:04][353948921841949][289 ms][DEBUG] START check_boot_completed [2025-09-08 13:46:04][353948921841949][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:46:04][353948921841949][335 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:46:04][353948921841949][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:46:04][353948921841949][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:46:04][353948921841949][382 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:46:04][353948921841949][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:46:04][353948921841949][507 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5517\nsuccessfulTxPacketsPerSecond: 1.3083345967465705\nretriedTxPackets: 1327\nretriedTxPacketsPerSecond: 0.38183155613204633\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4946\nsuccessfulRxPacketsPerSecond: 1.0724974591356007\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:46:04][353948921841949][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:46:04][353948921841949][852 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=235 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 235.486/235.486/235.486/0.000 ms\n [2025-09-08 13:46:04][353948921841949][852 ms][DEBUG] check_internet: online [2025-09-08 13:46:04][353948921841949][852 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:46:04][353948921841949][852 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353948921841949\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1870\"}'\'' -e'"" [2025-09-08 13:46:04][353948921841949][852 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:46:04][353948921841949][852 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353948921841949\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1870\"}'\'' -e'"" [2025-09-08 13:46:10][353948921841949][6412 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07bd9e7c-3030-486e-8d34-27e87e3b6e50","id":"QR_07bd9e7c-3030-486e-8d34-27e87e3b6e50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:46:10][353948921841949][6568 ms][DEBUG] proc_open done in 5716 ms; code=255; res.len=3343 [2025-09-08 13:46:10][353948921841949][6568 ms][DEBUG] END runCmdUntilRes#1 in 5716 ms [2025-09-08 13:46:10][353948921841949][6568 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:46:12][353948921841949][0 ms][INFO] === Request start === [2025-09-08 13:46:12][353948921841949][1 ms][DEBUG] START check_scloud [2025-09-08 13:46:12][353948921841949][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:46:12][353948921841949][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 18345 18958 24509412 195240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:46:12][353948921841949][309 ms][DEBUG] targetPkg: running [2025-09-08 13:46:12][353948921841949][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 13:46:12][353948921841949][309 ms][DEBUG] START check_boot_completed [2025-09-08 13:46:12][353948921841949][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:46:12][353948921841949][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:46:12][353948921841949][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:46:13][353948921841949][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:46:13][353948921841949][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:46:13][353948921841949][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:46:13][353948921841949][512 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5517\nsuccessfulTxPacketsPerSecond: 1.3083345967465705\nretriedTxPackets: 1327\nretriedTxPacketsPerSecond: 0.38183155613204633\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4946\nsuccessfulRxPacketsPerSecond: 1.0724974591356007\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:46:13][353948921841949][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:46:13][353948921841949][840 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.672/237.672/237.672/0.000 ms\n [2025-09-08 13:46:13][353948921841949][840 ms][DEBUG] check_internet: online [2025-09-08 13:46:13][353948921841949][840 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:46:13][353948921841949][840 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353948921841949\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4912\"}'\'' -e'"" [2025-09-08 13:46:13][353948921841949][840 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:46:13][353948921841949][840 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353948921841949\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4912\"}'\'' -e'"" [2025-09-08 13:46:18][353948921841949][6245 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee4936a9-0280-4e65-9fa4-7e419313e577","id":"QR_ee4936a9-0280-4e65-9fa4-7e419313e577","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:46:19][353948921841949][6401 ms][DEBUG] proc_open done in 5561 ms; code=255; res.len=3343 [2025-09-08 13:46:19][353948921841949][6401 ms][DEBUG] END runCmdUntilRes#1 in 5561 ms [2025-09-08 13:46:19][353948921841949][6401 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:47:04][351370171226618][0 ms][INFO] === Request start === [2025-09-08 13:47:04][351370171226618][1 ms][DEBUG] START check_scloud [2025-09-08 13:47:04][351370171226618][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:47:05][351370171226618][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 18345 18958 24621092 207220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:47:05][351370171226618][301 ms][DEBUG] targetPkg: running [2025-09-08 13:47:05][351370171226618][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-08 13:47:05][351370171226618][301 ms][DEBUG] START check_boot_completed [2025-09-08 13:47:05][351370171226618][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:47:05][351370171226618][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:47:05][351370171226618][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:47:05][351370171226618][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:47:05][351370171226618][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:47:05][351370171226618][379 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:47:05][351370171226618][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351370171226618\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4295\"}'\'' -e'"" [2025-09-08 13:47:05][351370171226618][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:47:05][351370171226618][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351370171226618\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4295\"}'\'' -e'"" [2025-09-08 13:47:08][351370171226618][3831 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 13:47:08][351370171226618][3987 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=115 [2025-09-08 13:47:08][351370171226618][3987 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-08 13:47:08][351370171226618][3987 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 13:47:09][][0 ms][INFO] === Request start === [2025-09-08 13:47:09][][0 ms][DEBUG] START check_scloud [2025-09-08 13:47:09][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:47:09][][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 18345 18958 24757548 217908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:47:09][][258 ms][DEBUG] targetPkg: running [2025-09-08 13:47:09][][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-08 13:47:09][][258 ms][DEBUG] START check_boot_completed [2025-09-08 13:47:09][][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:47:09][][287 ms][DEBUG] ADB: done in 29 ms; out [2025-09-08 13:47:09][][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:47:09][][334 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:47:09][][334 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-08 13:47:09][][334 ms][DEBUG] rawBody.length=1141 [2025-09-08 13:47:09][][334 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CW60BFJPE\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1799\"}'\'' -e'"" [2025-09-08 13:47:09][][334 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:47:09][][334 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CW60BFJPE\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1799\"}'\'' -e'"" [2025-09-08 13:47:12][][3896 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 13:47:13][][4052 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=115 [2025-09-08 13:47:13][][4052 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-09-08 13:47:13][][4052 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 13:47:13][351370171226618][0 ms][INFO] === Request start === [2025-09-08 13:47:13][351370171226618][1 ms][DEBUG] START check_scloud [2025-09-08 13:47:13][351370171226618][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:47:13][351370171226618][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 18345 18958 24912436 230092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:47:13][351370171226618][253 ms][DEBUG] targetPkg: running [2025-09-08 13:47:13][351370171226618][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-08 13:47:13][351370171226618][253 ms][DEBUG] START check_boot_completed [2025-09-08 13:47:13][351370171226618][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:47:13][351370171226618][298 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 13:47:13][351370171226618][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:47:13][351370171226618][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:47:13][351370171226618][345 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 13:47:13][351370171226618][345 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:47:13][351370171226618][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351370171226618\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3232\"}'\'' -e'"" [2025-09-08 13:47:13][351370171226618][345 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:47:13][351370171226618][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351370171226618\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3232\"}'\'' -e'"" [2025-09-08 13:47:19][351370171226618][5984 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b76c4c06-c1db-4346-a07d-ff68744941a2","id":"QR_b76c4c06-c1db-4346-a07d-ff68744941a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:47:19][351370171226618][6140 ms][DEBUG] proc_open done in 5795 ms; code=255; res.len=3343 [2025-09-08 13:47:19][351370171226618][6140 ms][DEBUG] END runCmdUntilRes#1 in 5796 ms [2025-09-08 13:47:19][351370171226618][6140 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:51:03][355291290158480][1 ms][INFO] === Request start === [2025-09-08 13:51:03][355291290158480][1 ms][DEBUG] START check_scloud [2025-09-08 13:51:03][355291290158480][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:51:04][355291290158480][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 18345 18958 24987344 242040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:51:04][355291290158480][300 ms][DEBUG] targetPkg: running [2025-09-08 13:51:04][355291290158480][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 13:51:04][355291290158480][300 ms][DEBUG] START check_boot_completed [2025-09-08 13:51:04][355291290158480][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:51:04][355291290158480][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:51:04][355291290158480][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:51:04][355291290158480][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:51:04][355291290158480][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:51:04][355291290158480][378 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:51:04][355291290158480][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355291290158480\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3577\"}'\'' -e'"" [2025-09-08 13:51:04][355291290158480][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:51:04][355291290158480][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355291290158480\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3577\"}'\'' -e'"" [2025-09-08 13:51:07][355291290158480][4174 ms][DEBUG] proc_open done in 3795 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 13:51:07][355291290158480][4174 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-09-08 13:51:07][355291290158480][4174 ms][WARN] Detected error: Process with pid 18345 either refused to load frida-agent, or terminated during injectionProcess with pid 18345 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 13:51:07][355291290158480][4174 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 13:51:08][355291290158480][4439 ms][DEBUG] SU: done in 266 ms; outsystem 19215 18958 12972520 186364 ep_poll 0 S system_server\n [2025-09-08 13:51:08][355291290158480][4440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 13:51:08][355291290158480][4580 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 13:51:08][355291290158480][4580 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 13:51:08][355291290158480][4580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 13:51:08][355291290158480][4705 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 13:51:08][355291290158480][4705 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 13:51:08][355291290158480][4877 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 13:51:10][355291290158480][6892 ms][DEBUG] START check_boot_completed [2025-09-08 13:51:10][355291290158480][6892 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:51:10][355291290158480][6939 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:51:10][355291290158480][6939 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:51:10][355291290158480][6986 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:51:10][355291290158480][6986 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 13:51:13][355291290158480][10000 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 13:51:13][355291290158480][10001 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355291290158480\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3577\"}'\'' -e'"" [2025-09-08 13:51:18][355291290158480][14359 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf2f6003-f3da-4f41-b50f-0d0f0c1014f7","id":"QR_bf2f6003-f3da-4f41-b50f-0d0f0c1014f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:51:18][355291290158480][14515 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-09-08 13:51:18][355291290158480][14515 ms][DEBUG] END runCmdUntilRes#2 in 4515 ms [2025-09-08 13:51:18][355291290158480][14515 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:51:20][355291290158480][0 ms][INFO] === Request start === [2025-09-08 13:51:20][355291290158480][1 ms][DEBUG] START check_scloud [2025-09-08 13:51:20][355291290158480][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:51:20][355291290158480][239 ms][DEBUG] SU: done in 239 ms; outu0_a118 20881 18958 23797856 124188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:51:20][355291290158480][240 ms][DEBUG] targetPkg: running [2025-09-08 13:51:20][355291290158480][240 ms][DEBUG] END check_scloud in 239 ms [2025-09-08 13:51:20][355291290158480][240 ms][DEBUG] START check_boot_completed [2025-09-08 13:51:20][355291290158480][240 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:51:20][355291290158480][286 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:51:20][355291290158480][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:51:20][355291290158480][349 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:51:20][355291290158480][349 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:51:20][355291290158480][349 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:51:20][355291290158480][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355291290158480\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1155\"}'\'' -e'"" [2025-09-08 13:51:20][355291290158480][349 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:51:20][355291290158480][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355291290158480\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1155\"}'\'' -e'"" [2025-09-08 13:51:25][355291290158480][5425 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c980aa2-9f69-48ab-9c81-07607908e12c","id":"QR_5c980aa2-9f69-48ab-9c81-07607908e12c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:51:26][355291290158480][5582 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-08 13:51:26][355291290158480][5582 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-08 13:51:26][355291290158480][5582 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:52:03][355472980872909][0 ms][INFO] === Request start === [2025-09-08 13:52:03][355472980872909][1 ms][DEBUG] START check_scloud [2025-09-08 13:52:03][355472980872909][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:52:03][355472980872909][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 20881 18958 23856636 138228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:52:03][355472980872909][287 ms][DEBUG] targetPkg: running [2025-09-08 13:52:03][355472980872909][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-08 13:52:03][355472980872909][287 ms][DEBUG] START check_boot_completed [2025-09-08 13:52:03][355472980872909][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:52:03][355472980872909][334 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:52:03][355472980872909][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:52:03][355472980872909][397 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:52:03][355472980872909][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:52:03][355472980872909][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:52:03][355472980872909][506 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5754\nsuccessfulTxPacketsPerSecond: 0.03892970856915125\nretriedTxPackets: 1394\nretriedTxPacketsPerSecond: 4.091942153110481E-5\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5141\nsuccessfulRxPacketsPerSecond: 1.1909383878455877E-4\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:52:03][355472980872909][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:52:05][355472980872909][1850 ms][DEBUG] SU: done in 1344 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.667/198.667/198.667/0.000 ms\n [2025-09-08 13:52:05][355472980872909][1850 ms][DEBUG] check_internet: online [2025-09-08 13:52:05][355472980872909][1850 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:52:05][355472980872909][1850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472980872909\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5155\"}'\'' -e'"" [2025-09-08 13:52:05][355472980872909][1851 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:52:05][355472980872909][1851 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472980872909\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5155\"}'\'' -e'"" [2025-09-08 13:52:09][355472980872909][6083 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4459e2d-8096-4e81-b661-3e54a0c4cf97","id":"QR_c4459e2d-8096-4e81-b661-3e54a0c4cf97","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:52:09][355472980872909][6239 ms][DEBUG] proc_open done in 4388 ms; code=255; res.len=3343 [2025-09-08 13:52:09][355472980872909][6239 ms][DEBUG] END runCmdUntilRes#1 in 4388 ms [2025-09-08 13:52:09][355472980872909][6239 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:52:12][355472980872909][0 ms][INFO] === Request start === [2025-09-08 13:52:12][355472980872909][1 ms][DEBUG] START check_scloud [2025-09-08 13:52:12][355472980872909][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:52:12][355472980872909][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 20881 18958 24035908 149476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:52:12][355472980872909][279 ms][DEBUG] targetPkg: running [2025-09-08 13:52:12][355472980872909][279 ms][DEBUG] END check_scloud in 278 ms [2025-09-08 13:52:12][355472980872909][279 ms][DEBUG] START check_boot_completed [2025-09-08 13:52:12][355472980872909][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:52:12][355472980872909][326 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:52:12][355472980872909][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:52:12][355472980872909][388 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:52:12][355472980872909][388 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:52:12][355472980872909][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:52:12][355472980872909][498 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5754\nsuccessfulTxPacketsPerSecond: 0.03892970856915125\nretriedTxPackets: 1394\nretriedTxPacketsPerSecond: 4.091942153110481E-5\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5141\nsuccessfulRxPacketsPerSecond: 1.1909383878455877E-4\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:52:12][355472980872909][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:52:12][355472980872909][872 ms][DEBUG] SU: done in 374 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.627/237.627/237.627/0.000 ms\n [2025-09-08 13:52:12][355472980872909][872 ms][DEBUG] check_internet: online [2025-09-08 13:52:12][355472980872909][872 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:52:12][355472980872909][873 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472980872909\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4458\"}'\'' -e'"" [2025-09-08 13:52:12][355472980872909][873 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:52:12][355472980872909][873 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472980872909\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4458\"}'\'' -e'"" [2025-09-08 13:52:17][355472980872909][5418 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1e5a74b-f9c3-4d35-acb8-5d733168c078","id":"QR_f1e5a74b-f9c3-4d35-acb8-5d733168c078","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:52:17][355472980872909][5574 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-08 13:52:17][355472980872909][5574 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-08 13:52:17][355472980872909][5574 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:53:04][358230101112580][1 ms][INFO] === Request start === [2025-09-08 13:53:04][358230101112580][1 ms][DEBUG] START check_scloud [2025-09-08 13:53:04][358230101112580][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:53:04][358230101112580][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 20881 18958 24137540 160640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:53:04][358230101112580][249 ms][DEBUG] targetPkg: running [2025-09-08 13:53:04][358230101112580][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-08 13:53:04][358230101112580][249 ms][DEBUG] START check_boot_completed [2025-09-08 13:53:04][358230101112580][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:53:04][358230101112580][296 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:53:04][358230101112580][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:53:04][358230101112580][390 ms][DEBUG] SU: done in 93 ms; out [2025-09-08 13:53:04][358230101112580][390 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 13:53:04][358230101112580][390 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:53:04][358230101112580][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358230101112580\",\"model\":\"SM-N970U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3369\"}'\'' -e'"" [2025-09-08 13:53:04][358230101112580][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:53:04][358230101112580][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358230101112580\",\"model\":\"SM-N970U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3369\"}'\'' -e'"" [2025-09-08 13:53:10][358230101112580][6357 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6dde0bed-3a87-48f5-ace6-fa2e63358262","id":"QR_6dde0bed-3a87-48f5-ace6-fa2e63358262","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:53:10][358230101112580][6513 ms][DEBUG] proc_open done in 6123 ms; code=255; res.len=3343 [2025-09-08 13:53:10][358230101112580][6513 ms][DEBUG] END runCmdUntilRes#1 in 6123 ms [2025-09-08 13:53:10][358230101112580][6513 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:53:14][358230101112580][0 ms][INFO] === Request start === [2025-09-08 13:53:14][358230101112580][1 ms][DEBUG] START check_scloud [2025-09-08 13:53:14][358230101112580][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:53:14][358230101112580][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 20881 18958 24258432 171576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:53:14][358230101112580][307 ms][DEBUG] targetPkg: running [2025-09-08 13:53:14][358230101112580][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 13:53:14][358230101112580][307 ms][DEBUG] START check_boot_completed [2025-09-08 13:53:14][358230101112580][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:53:14][358230101112580][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:53:14][358230101112580][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:53:14][358230101112580][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:53:14][358230101112580][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:53:14][358230101112580][386 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:53:14][358230101112580][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358230101112580\",\"model\":\"SM-N970U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4559\"}'\'' -e'"" [2025-09-08 13:53:14][358230101112580][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:53:14][358230101112580][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358230101112580\",\"model\":\"SM-N970U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4559\"}'\'' -e'"" [2025-09-08 13:53:18][358230101112580][4353 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ccef52a2-4e56-46b6-8768-3f3f8dcef6b9","id":"QR_ccef52a2-4e56-46b6-8768-3f3f8dcef6b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:53:18][358230101112580][4509 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-09-08 13:53:18][358230101112580][4510 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-09-08 13:53:18][358230101112580][4510 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:53:20][351877477934869][0 ms][INFO] === Request start === [2025-09-08 13:53:20][351877477934869][1 ms][DEBUG] START check_scloud [2025-09-08 13:53:20][351877477934869][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:53:20][351877477934869][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 20881 18958 24431688 183340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:53:20][351877477934869][278 ms][DEBUG] targetPkg: running [2025-09-08 13:53:20][351877477934869][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-08 13:53:20][351877477934869][278 ms][DEBUG] START check_boot_completed [2025-09-08 13:53:20][351877477934869][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:53:20][351877477934869][309 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:53:20][351877477934869][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:53:20][351877477934869][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:53:20][351877477934869][356 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:53:20][351877477934869][356 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:53:20][351877477934869][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477934869\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9341\"}'\'' -e'"" [2025-09-08 13:53:20][351877477934869][356 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:53:20][351877477934869][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477934869\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9341\"}'\'' -e'"" [2025-09-08 13:53:24][351877477934869][3699 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_62213134-019c-47ca-a244-c90d3078c24c","id":"QR_62213134-019c-47ca-a244-c90d3078c24c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:53:24][351877477934869][3855 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-08 13:53:24][351877477934869][3855 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-08 13:53:24][351877477934869][3855 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:53:26][351877477934869][0 ms][INFO] === Request start === [2025-09-08 13:53:26][351877477934869][0 ms][DEBUG] START check_scloud [2025-09-08 13:53:26][351877477934869][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:53:27][351877477934869][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 20881 18958 24565932 194296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:53:27][351877477934869][289 ms][DEBUG] targetPkg: running [2025-09-08 13:53:27][351877477934869][289 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 13:53:27][351877477934869][289 ms][DEBUG] START check_boot_completed [2025-09-08 13:53:27][351877477934869][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:53:27][351877477934869][336 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:53:27][351877477934869][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:53:27][351877477934869][398 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 13:53:27][351877477934869][398 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:53:27][351877477934869][398 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:53:27][351877477934869][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477934869\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1112\"}'\'' -e'"" [2025-09-08 13:53:27][351877477934869][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:53:27][351877477934869][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477934869\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1112\"}'\'' -e'"" [2025-09-08 13:53:31][351877477934869][5006 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_265a1b39-66d5-42a9-85aa-f059c0b5c8b1","id":"QR_265a1b39-66d5-42a9-85aa-f059c0b5c8b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:53:31][351877477934869][5163 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-08 13:53:31][351877477934869][5163 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-08 13:53:31][351877477934869][5163 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:54:03][351786692911091][0 ms][INFO] === Request start === [2025-09-08 13:54:03][351786692911091][1 ms][DEBUG] START check_scloud [2025-09-08 13:54:03][351786692911091][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:54:03][351786692911091][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 20881 18958 24650952 206400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:54:03][351786692911091][257 ms][DEBUG] targetPkg: running [2025-09-08 13:54:03][351786692911091][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-08 13:54:03][351786692911091][257 ms][DEBUG] START check_boot_completed [2025-09-08 13:54:03][351786692911091][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:54:03][351786692911091][303 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:54:03][351786692911091][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:54:03][351786692911091][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:54:03][351786692911091][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:54:03][351786692911091][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:54:03][351786692911091][460 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5924\nsuccessfulTxPacketsPerSecond: 0.6172592961065462\nretriedTxPackets: 1443\nretriedTxPacketsPerSecond: 0.17791591476012214\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5288\nsuccessfulRxPacketsPerSecond: 0.5337477442803664\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:54:03][351786692911091][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:54:04][351786692911091][834 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.585/237.585/237.585/0.000 ms\n [2025-09-08 13:54:04][351786692911091][834 ms][DEBUG] check_internet: online [2025-09-08 13:54:04][351786692911091][834 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:54:04][351786692911091][835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692911091\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7837\"}'\'' -e'"" [2025-09-08 13:54:04][351786692911091][835 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:54:04][351786692911091][835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692911091\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7837\"}'\'' -e'"" [2025-09-08 13:54:07][351786692911091][4146 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57be6a80-4bfb-40bc-8da0-c07b559f11fc","id":"QR_57be6a80-4bfb-40bc-8da0-c07b559f11fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:54:07][351786692911091][4302 ms][DEBUG] proc_open done in 3468 ms; code=255; res.len=3343 [2025-09-08 13:54:07][351786692911091][4302 ms][DEBUG] END runCmdUntilRes#1 in 3468 ms [2025-09-08 13:54:07][351786692911091][4302 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:54:10][351786692911091][0 ms][INFO] === Request start === [2025-09-08 13:54:10][351786692911091][1 ms][DEBUG] START check_scloud [2025-09-08 13:54:10][351786692911091][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:54:10][351786692911091][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 20881 18958 24807888 217428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:54:10][351786692911091][313 ms][DEBUG] targetPkg: running [2025-09-08 13:54:10][351786692911091][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 13:54:10][351786692911091][313 ms][DEBUG] START check_boot_completed [2025-09-08 13:54:10][351786692911091][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:54:10][351786692911091][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:54:10][351786692911091][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:54:10][351786692911091][453 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 13:54:10][351786692911091][453 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 13:54:10][351786692911091][453 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:54:10][351786692911091][578 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5924\nsuccessfulTxPacketsPerSecond: 0.6172592961065462\nretriedTxPackets: 1443\nretriedTxPacketsPerSecond: 0.17791591476012214\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5288\nsuccessfulRxPacketsPerSecond: 0.5337477442803664\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:54:10][351786692911091][579 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:54:10][351786692911091][953 ms][DEBUG] SU: done in 374 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.440/269.440/269.440/0.000 ms\n [2025-09-08 13:54:10][351786692911091][953 ms][DEBUG] check_internet: online [2025-09-08 13:54:10][351786692911091][953 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:54:10][351786692911091][953 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692911091\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7781\"}'\'' -e'"" [2025-09-08 13:54:10][351786692911091][953 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:54:10][351786692911091][954 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692911091\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7781\"}'\'' -e'"" [2025-09-08 13:54:16][351786692911091][6827 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45934e2d-9223-41e1-b4a2-540aedf0088e","id":"QR_45934e2d-9223-41e1-b4a2-540aedf0088e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:54:17][351786692911091][6983 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-09-08 13:54:17][351786692911091][6983 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-09-08 13:54:17][351786692911091][6983 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:55:03][351877471211579][0 ms][INFO] === Request start === [2025-09-08 13:55:03][351877471211579][1 ms][DEBUG] START check_scloud [2025-09-08 13:55:03][351877471211579][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:55:03][351877471211579][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 20881 18958 24920592 229320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:55:03][351877471211579][315 ms][DEBUG] targetPkg: running [2025-09-08 13:55:03][351877471211579][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 13:55:03][351877471211579][315 ms][DEBUG] START check_boot_completed [2025-09-08 13:55:03][351877471211579][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:55:03][351877471211579][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:55:03][351877471211579][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:55:03][351877471211579][410 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 13:55:03][351877471211579][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 13:55:03][351877471211579][410 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:55:03][351877471211579][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877471211579\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4999\"}'\'' -e'"" [2025-09-08 13:55:03][351877471211579][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:55:03][351877471211579][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877471211579\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4999\"}'\'' -e'"" [2025-09-08 13:55:08][351877471211579][4986 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89c16ad3-9505-4793-80dd-33deee8c8437","id":"QR_89c16ad3-9505-4793-80dd-33deee8c8437","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:55:08][351877471211579][5142 ms][DEBUG] proc_open done in 4731 ms; code=255; res.len=3343 [2025-09-08 13:55:08][351877471211579][5142 ms][DEBUG] END runCmdUntilRes#1 in 4732 ms [2025-09-08 13:55:08][351877471211579][5142 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:55:11][351877471211579][1 ms][INFO] === Request start === [2025-09-08 13:55:11][351877471211579][1 ms][DEBUG] START check_scloud [2025-09-08 13:55:11][351877471211579][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:55:11][351877471211579][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 20881 18958 25079576 241196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:55:11][351877471211579][294 ms][DEBUG] targetPkg: running [2025-09-08 13:55:11][351877471211579][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-08 13:55:11][351877471211579][294 ms][DEBUG] START check_boot_completed [2025-09-08 13:55:11][351877471211579][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:55:11][351877471211579][341 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:55:11][351877471211579][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:55:11][351877471211579][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:55:11][351877471211579][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:55:11][351877471211579][388 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:55:11][351877471211579][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877471211579\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8281\"}'\'' -e'"" [2025-09-08 13:55:11][351877471211579][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:55:11][351877471211579][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877471211579\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8281\"}'\'' -e'"" [2025-09-08 13:55:15][351877471211579][4043 ms][DEBUG] proc_open done in 3655 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 13:55:15][351877471211579][4043 ms][DEBUG] END runCmdUntilRes#1 in 3656 ms [2025-09-08 13:55:15][351877471211579][4043 ms][WARN] Detected error: Process with pid 20881 either refused to load frida-agent, or terminated during injectionProcess with pid 20881 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 13:55:15][351877471211579][4043 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 13:55:15][351877471211579][4309 ms][DEBUG] SU: done in 265 ms; outsystem 19215 18958 12835172 177360 ep_poll 0 S system_server\n [2025-09-08 13:55:15][351877471211579][4309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 13:55:15][351877471211579][4449 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 13:55:15][351877471211579][4449 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 13:55:15][351877471211579][4449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 13:55:15][351877471211579][4575 ms][DEBUG] SU: done in 126 ms; out [2025-09-08 13:55:15][351877471211579][4575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 13:55:15][351877471211579][4748 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 13:55:17][351877471211579][6761 ms][DEBUG] START check_boot_completed [2025-09-08 13:55:17][351877471211579][6761 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:55:17][351877471211579][6808 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:55:17][351877471211579][6808 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:55:17][351877471211579][6870 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:55:17][351877471211579][6870 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:55:20][351877471211579][9885 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 13:55:20][351877471211579][9885 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877471211579\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8281\"}'\'' -e'"" [2025-09-08 13:55:25][351877471211579][14400 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_caaed773-9240-4b5b-ba17-fcaf3a2c2e98","id":"QR_caaed773-9240-4b5b-ba17-fcaf3a2c2e98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:55:25][351877471211579][14556 ms][DEBUG] proc_open done in 4671 ms; code=255; res.len=3343 [2025-09-08 13:55:25][351877471211579][14556 ms][DEBUG] END runCmdUntilRes#2 in 4671 ms [2025-09-08 13:55:25][351877471211579][14556 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:57:05][357800558465888][0 ms][INFO] === Request start === [2025-09-08 13:57:05][357800558465888][1 ms][DEBUG] START check_scloud [2025-09-08 13:57:05][357800558465888][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:57:05][357800558465888][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 22423 18958 23785328 127152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:57:05][357800558465888][307 ms][DEBUG] targetPkg: running [2025-09-08 13:57:05][357800558465888][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 13:57:05][357800558465888][307 ms][DEBUG] START check_boot_completed [2025-09-08 13:57:05][357800558465888][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:57:05][357800558465888][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 13:57:05][357800558465888][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:57:05][357800558465888][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 13:57:05][357800558465888][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 13:57:05][357800558465888][416 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:57:05][357800558465888][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800558465888\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1400\"}'\'' -e'"" [2025-09-08 13:57:05][357800558465888][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:57:05][357800558465888][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800558465888\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1400\"}'\'' -e'"" [2025-09-08 13:57:12][357800558465888][7414 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e9dc8f9-f5e6-4f45-bc78-7042c9bf6716","id":"QR_5e9dc8f9-f5e6-4f45-bc78-7042c9bf6716","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:57:12][357800558465888][7570 ms][DEBUG] proc_open done in 7154 ms; code=255; res.len=3343 [2025-09-08 13:57:12][357800558465888][7570 ms][DEBUG] END runCmdUntilRes#1 in 7154 ms [2025-09-08 13:57:12][357800558465888][7571 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:57:16][357800558465888][1 ms][INFO] === Request start === [2025-09-08 13:57:16][357800558465888][1 ms][DEBUG] START check_scloud [2025-09-08 13:57:16][357800558465888][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:57:16][357800558465888][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 22423 18958 23945196 138080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:57:16][357800558465888][306 ms][DEBUG] targetPkg: running [2025-09-08 13:57:16][357800558465888][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 13:57:16][357800558465888][306 ms][DEBUG] START check_boot_completed [2025-09-08 13:57:16][357800558465888][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:57:16][357800558465888][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:57:16][357800558465888][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:57:16][357800558465888][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:57:16][357800558465888][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:57:16][357800558465888][399 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:57:16][357800558465888][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800558465888\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7256\"}'\'' -e'"" [2025-09-08 13:57:16][357800558465888][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:57:16][357800558465888][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800558465888\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7256\"}'\'' -e'"" [2025-09-08 13:57:20][357800558465888][4305 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65f630d8-523d-4ff2-b62e-62a130cfc86f","id":"QR_65f630d8-523d-4ff2-b62e-62a130cfc86f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:57:20][357800558465888][4461 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-08 13:57:20][357800558465888][4461 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-08 13:57:20][357800558465888][4461 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:58:03][353325477612570][0 ms][INFO] === Request start === [2025-09-08 13:58:03][353325477612570][1 ms][DEBUG] START check_scloud [2025-09-08 13:58:03][353325477612570][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:58:04][353325477612570][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 22423 18958 24047716 149820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:58:04][353325477612570][300 ms][DEBUG] targetPkg: running [2025-09-08 13:58:04][353325477612570][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 13:58:04][353325477612570][300 ms][DEBUG] START check_boot_completed [2025-09-08 13:58:04][353325477612570][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:58:04][353325477612570][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:58:04][353325477612570][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:58:04][353325477612570][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:58:04][353325477612570][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:58:04][353325477612570][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:58:04][353325477612570][503 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6194\nsuccessfulTxPacketsPerSecond: 0.8969682473240447\nretriedTxPackets: 1522\nretriedTxPacketsPerSecond: 0.26244626495777607\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5509\nsuccessfulRxPacketsPerSecond: 0.7341851209578292\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:58:04][353325477612570][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:58:05][353325477612570][1816 ms][DEBUG] SU: done in 1312 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.562/197.562/197.562/0.000 ms\n [2025-09-08 13:58:05][353325477612570][1816 ms][DEBUG] check_internet: online [2025-09-08 13:58:05][353325477612570][1816 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:58:05][353325477612570][1816 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325477612570\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9284\"}'\'' -e'"" [2025-09-08 13:58:05][353325477612570][1816 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:58:05][353325477612570][1816 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325477612570\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9284\"}'\'' -e'"" [2025-09-08 13:58:09][353325477612570][5533 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1475527-120c-4617-897b-d17ac36c4d59","id":"QR_d1475527-120c-4617-897b-d17ac36c4d59","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:58:09][353325477612570][5689 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-08 13:58:09][353325477612570][5689 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-08 13:58:09][353325477612570][5690 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:58:11][353325477612570][0 ms][INFO] === Request start === [2025-09-08 13:58:11][353325477612570][1 ms][DEBUG] START check_scloud [2025-09-08 13:58:11][353325477612570][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:58:12][353325477612570][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 22423 18958 24229164 160920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:58:12][353325477612570][305 ms][DEBUG] targetPkg: running [2025-09-08 13:58:12][353325477612570][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 13:58:12][353325477612570][305 ms][DEBUG] START check_boot_completed [2025-09-08 13:58:12][353325477612570][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:58:12][353325477612570][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:58:12][353325477612570][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:58:12][353325477612570][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:58:12][353325477612570][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 13:58:12][353325477612570][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 13:58:12][353325477612570][508 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1503893 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6194\nsuccessfulTxPacketsPerSecond: 0.8969682473240447\nretriedTxPackets: 1522\nretriedTxPacketsPerSecond: 0.26244626495777607\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5509\nsuccessfulRxPacketsPerSecond: 0.7341851209578292\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 13:58:12][353325477612570][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 13:58:12][353325477612570][867 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.133/245.133/245.133/0.000 ms\n [2025-09-08 13:58:12][353325477612570][867 ms][DEBUG] check_internet: online [2025-09-08 13:58:12][353325477612570][867 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:58:12][353325477612570][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325477612570\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3758\"}'\'' -e'"" [2025-09-08 13:58:12][353325477612570][867 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:58:12][353325477612570][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325477612570\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3758\"}'\'' -e'"" [2025-09-08 13:58:17][353325477612570][5709 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30429898-cbd0-4db8-9313-f06aa9e62359","id":"QR_30429898-cbd0-4db8-9313-f06aa9e62359","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:58:17][353325477612570][5866 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-08 13:58:17][353325477612570][5866 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-08 13:58:17][353325477612570][5866 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:59:03][355128630952612][0 ms][INFO] === Request start === [2025-09-08 13:59:03][355128630952612][1 ms][DEBUG] START check_scloud [2025-09-08 13:59:03][355128630952612][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:59:03][355128630952612][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 22423 18958 24369516 171952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:59:03][355128630952612][293 ms][DEBUG] targetPkg: running [2025-09-08 13:59:03][355128630952612][293 ms][DEBUG] END check_scloud in 293 ms [2025-09-08 13:59:03][355128630952612][293 ms][DEBUG] START check_boot_completed [2025-09-08 13:59:03][355128630952612][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:59:03][355128630952612][340 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 13:59:03][355128630952612][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:59:03][355128630952612][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:59:03][355128630952612][387 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 13:59:03][355128630952612][387 ms][DEBUG] rawBody.length=1150 [2025-09-08 13:59:03][355128630952612][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128630952612\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9411\"}'\'' -e'"" [2025-09-08 13:59:03][355128630952612][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:59:03][355128630952612][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128630952612\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9411\"}'\'' -e'"" [2025-09-08 13:59:08][355128630952612][4886 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_081c1084-60a8-4352-a816-506e1a217e44","id":"QR_081c1084-60a8-4352-a816-506e1a217e44","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:59:08][355128630952612][5042 ms][DEBUG] proc_open done in 4654 ms; code=255; res.len=3343 [2025-09-08 13:59:08][355128630952612][5042 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-09-08 13:59:08][355128630952612][5042 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 13:59:10][355128630952612][0 ms][INFO] === Request start === [2025-09-08 13:59:10][355128630952612][1 ms][DEBUG] START check_scloud [2025-09-08 13:59:10][355128630952612][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 13:59:10][355128630952612][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 22423 18958 24550580 183860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 13:59:10][355128630952612][300 ms][DEBUG] targetPkg: running [2025-09-08 13:59:10][355128630952612][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 13:59:10][355128630952612][300 ms][DEBUG] START check_boot_completed [2025-09-08 13:59:10][355128630952612][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 13:59:10][355128630952612][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 13:59:10][355128630952612][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 13:59:10][355128630952612][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 13:59:10][355128630952612][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 13:59:10][355128630952612][378 ms][DEBUG] rawBody.length=1160 [2025-09-08 13:59:10][355128630952612][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128630952612\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9190\"}'\'' -e'"" [2025-09-08 13:59:10][355128630952612][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 13:59:10][355128630952612][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128630952612\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9190\"}'\'' -e'"" [2025-09-08 13:59:15][355128630952612][5299 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18ea135f-4bd8-44a7-a6f2-0feeed290afd","id":"QR_18ea135f-4bd8-44a7-a6f2-0feeed290afd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 13:59:16][355128630952612][5455 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-09-08 13:59:16][355128630952612][5455 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-08 13:59:16][355128630952612][5455 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:00:04][354423104392333][1 ms][INFO] === Request start === [2025-09-08 14:00:04][354423104392333][1 ms][DEBUG] START check_scloud [2025-09-08 14:00:04][354423104392333][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:00:04][354423104392333][417 ms][DEBUG] SU: done in 416 ms; out [2025-09-08 14:00:04][354423104392333][417 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 14:00:04][354423104392333][464 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 14:00:04][354423104392333][464 ms][DEBUG] check_devices: device found [2025-09-08 14:00:04][354423104392333][464 ms][WARN] targetPkg: not running, restarting [2025-09-08 14:00:04][354423104392333][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 14:00:05][354423104392333][620 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 14:00:05][354423104392333][620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 14:00:05][354423104392333][839 ms][DEBUG] SU: done in 218 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 14:00:07][354423104392333][2854 ms][DEBUG] END check_scloud in 2853 ms [2025-09-08 14:00:07][354423104392333][2854 ms][DEBUG] START check_boot_completed [2025-09-08 14:00:07][354423104392333][2854 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:00:07][354423104392333][2901 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:00:07][354423104392333][2901 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:00:07][354423104392333][2963 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:00:07][354423104392333][2963 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 14:00:07][354423104392333][2964 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:00:07][354423104392333][3120 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 118\nsuccessfulTxPacketsPerSecond: 6.784734834891288\nretriedTxPackets: 26\nretriedTxPacketsPerSecond: 2.862395618883563\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 96\nsuccessfulRxPacketsPerSecond: 5.361535950886901\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:00:07][354423104392333][3120 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:00:08][354423104392333][3963 ms][DEBUG] SU: done in 843 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.710/216.710/216.710/0.000 ms\n [2025-09-08 14:00:08][354423104392333][3964 ms][DEBUG] check_internet: online [2025-09-08 14:00:08][354423104392333][3964 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:00:08][354423104392333][3964 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354423104392333\",\"model\":\"SM-A505F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XEF\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5588\"}'\'' -e'"" [2025-09-08 14:00:08][354423104392333][3964 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:00:08][354423104392333][3964 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354423104392333\",\"model\":\"SM-A505F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XEF\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5588\"}'\'' -e'"" [2025-09-08 14:00:14][354423104392333][10024 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1bc12ce8-ae92-4d25-9f7d-164ca4fa787b","id":"QR_1bc12ce8-ae92-4d25-9f7d-164ca4fa787b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:00:14][354423104392333][10180 ms][DEBUG] proc_open done in 6216 ms; code=255; res.len=3343 [2025-09-08 14:00:14][354423104392333][10180 ms][DEBUG] END runCmdUntilRes#1 in 6216 ms [2025-09-08 14:00:14][354423104392333][10180 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:00:16][354423104392333][0 ms][INFO] === Request start === [2025-09-08 14:00:16][354423104392333][1 ms][DEBUG] START check_scloud [2025-09-08 14:00:16][354423104392333][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:00:17][354423104392333][389 ms][DEBUG] SU: done in 388 ms; outu0_a118 27047 23302 23724388 109732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:00:17][354423104392333][389 ms][DEBUG] targetPkg: running [2025-09-08 14:00:17][354423104392333][389 ms][DEBUG] END check_scloud in 389 ms [2025-09-08 14:00:17][354423104392333][389 ms][DEBUG] START check_boot_completed [2025-09-08 14:00:17][354423104392333][389 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:00:17][354423104392333][436 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:00:17][354423104392333][436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:00:17][354423104392333][498 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:00:17][354423104392333][498 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:00:17][354423104392333][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:00:17][354423104392333][623 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 220\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 51\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 191\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:00:17][354423104392333][624 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:00:17][354423104392333][1076 ms][DEBUG] SU: done in 453 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=308 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 308.969/308.969/308.969/0.000 ms\n [2025-09-08 14:00:17][354423104392333][1076 ms][DEBUG] check_internet: online [2025-09-08 14:00:17][354423104392333][1077 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:00:17][354423104392333][1077 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354423104392333\",\"model\":\"SM-A505F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XEF\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3643\"}'\'' -e'"" [2025-09-08 14:00:17][354423104392333][1077 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:00:17][354423104392333][1077 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354423104392333\",\"model\":\"SM-A505F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XEF\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3643\"}'\'' -e'"" [2025-09-08 14:00:24][354423104392333][7231 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6aed3e34-7718-4f62-9de1-2f5d8174f337","id":"QR_6aed3e34-7718-4f62-9de1-2f5d8174f337","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:00:24][354423104392333][7387 ms][DEBUG] proc_open done in 6310 ms; code=255; res.len=3343 [2025-09-08 14:00:24][354423104392333][7387 ms][DEBUG] END runCmdUntilRes#1 in 6311 ms [2025-09-08 14:00:24][354423104392333][7387 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:02:03][350026550545090][0 ms][INFO] === Request start === [2025-09-08 14:02:03][350026550545090][1 ms][DEBUG] START check_scloud [2025-09-08 14:02:03][350026550545090][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:02:03][350026550545090][347 ms][DEBUG] SU: done in 346 ms; outu0_a118 27047 23302 23754896 67832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:02:03][350026550545090][347 ms][DEBUG] targetPkg: running [2025-09-08 14:02:03][350026550545090][347 ms][DEBUG] END check_scloud in 346 ms [2025-09-08 14:02:03][350026550545090][347 ms][DEBUG] START check_boot_completed [2025-09-08 14:02:03][350026550545090][347 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:02:03][350026550545090][393 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:02:03][350026550545090][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:02:03][350026550545090][455 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:02:03][350026550545090][455 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 14:02:03][350026550545090][455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:02:03][350026550545090][611 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 300\nsuccessfulTxPacketsPerSecond: 7.946408210213098\nretriedTxPackets: 72\nretriedTxPacketsPerSecond: 2.085932155180939\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 262\nsuccessfulRxPacketsPerSecond: 7.052437286564126\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:02:03][350026550545090][612 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:02:04][350026550545090][1002 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=260 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 260.833/260.833/260.833/0.000 ms\n [2025-09-08 14:02:04][350026550545090][1002 ms][DEBUG] check_internet: online [2025-09-08 14:02:04][350026550545090][1002 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:02:04][350026550545090][1002 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026550545090\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9713\"}'\'' -e'"" [2025-09-08 14:02:04][350026550545090][1002 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:02:04][350026550545090][1002 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026550545090\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9713\"}'\'' -e'"" [2025-09-08 14:02:08][350026550545090][5376 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f346b431-eb4b-41bc-822c-d2ee1ca4f328","id":"QR_f346b431-eb4b-41bc-822c-d2ee1ca4f328","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:02:08][350026550545090][5532 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-09-08 14:02:08][350026550545090][5532 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-09-08 14:02:08][350026550545090][5532 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:02:11][350026550545090][1 ms][INFO] === Request start === [2025-09-08 14:02:11][350026550545090][1 ms][DEBUG] START check_scloud [2025-09-08 14:02:11][350026550545090][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:02:11][350026550545090][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 27047 23302 23926104 84004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:02:11][350026550545090][297 ms][DEBUG] targetPkg: running [2025-09-08 14:02:11][350026550545090][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-08 14:02:11][350026550545090][297 ms][DEBUG] START check_boot_completed [2025-09-08 14:02:11][350026550545090][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:02:11][350026550545090][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 14:02:11][350026550545090][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:02:11][350026550545090][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:02:11][350026550545090][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 14:02:11][350026550545090][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:02:11][350026550545090][485 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 300\nsuccessfulTxPacketsPerSecond: 7.946408210213098\nretriedTxPackets: 72\nretriedTxPacketsPerSecond: 2.085932155180939\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 262\nsuccessfulRxPacketsPerSecond: 7.052437286564126\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:02:11][350026550545090][485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:02:12][350026550545090][766 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.953/156.953/156.953/0.000 ms\n [2025-09-08 14:02:12][350026550545090][766 ms][DEBUG] check_internet: online [2025-09-08 14:02:12][350026550545090][766 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:02:12][350026550545090][766 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026550545090\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5103\"}'\'' -e'"" [2025-09-08 14:02:12][350026550545090][766 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:02:12][350026550545090][766 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026550545090\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5103\"}'\'' -e'"" [2025-09-08 14:02:17][350026550545090][6014 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_650c47d5-114d-4918-b85f-8aa31f0c25d2","id":"QR_650c47d5-114d-4918-b85f-8aa31f0c25d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:02:17][350026550545090][6171 ms][DEBUG] proc_open done in 5405 ms; code=255; res.len=3343 [2025-09-08 14:02:17][350026550545090][6171 ms][DEBUG] END runCmdUntilRes#1 in 5405 ms [2025-09-08 14:02:17][350026550545090][6171 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:06:04][354505623905114][1 ms][INFO] === Request start === [2025-09-08 14:06:04][354505623905114][1 ms][DEBUG] START check_scloud [2025-09-08 14:06:04][354505623905114][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:06:04][354505623905114][317 ms][DEBUG] SU: done in 315 ms; outu0_a118 27047 23302 24037848 101344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:06:04][354505623905114][317 ms][DEBUG] targetPkg: running [2025-09-08 14:06:04][354505623905114][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 14:06:04][354505623905114][317 ms][DEBUG] START check_boot_completed [2025-09-08 14:06:04][354505623905114][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:06:04][354505623905114][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:06:04][354505623905114][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:06:04][354505623905114][413 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 14:06:04][354505623905114][413 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-08 14:06:04][354505623905114][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:06:04][354505623905114][535 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 979\nsuccessfulTxPacketsPerSecond: 2.485113111076138\nretriedTxPackets: 165\nretriedTxPacketsPerSecond: 0.3403763171282487\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 995\nsuccessfulRxPacketsPerSecond: 2.682750972634476\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:06:04][354505623905114][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:06:06][354505623905114][1895 ms][DEBUG] SU: done in 1359 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.608/197.608/197.608/0.000 ms\n [2025-09-08 14:06:06][354505623905114][1895 ms][DEBUG] check_internet: online [2025-09-08 14:06:06][354505623905114][1895 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:06:06][354505623905114][1895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505623905114\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2777\"}'\'' -e'"" [2025-09-08 14:06:06][354505623905114][1895 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:06:06][354505623905114][1895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505623905114\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2777\"}'\'' -e'"" [2025-09-08 14:06:10][354505623905114][6221 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f9f57b17-7671-4ab7-b08d-cafc648bda51","id":"QR_f9f57b17-7671-4ab7-b08d-cafc648bda51","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:06:10][354505623905114][6378 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-09-08 14:06:10][354505623905114][6378 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-08 14:06:10][354505623905114][6378 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:06:12][354505623905114][0 ms][INFO] === Request start === [2025-09-08 14:06:12][354505623905114][1 ms][DEBUG] START check_scloud [2025-09-08 14:06:12][354505623905114][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:06:13][354505623905114][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 27047 23302 24164000 112532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:06:13][354505623905114][276 ms][DEBUG] targetPkg: running [2025-09-08 14:06:13][354505623905114][276 ms][DEBUG] END check_scloud in 275 ms [2025-09-08 14:06:13][354505623905114][276 ms][DEBUG] START check_boot_completed [2025-09-08 14:06:13][354505623905114][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:06:13][354505623905114][322 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:06:13][354505623905114][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:06:13][354505623905114][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:06:13][354505623905114][370 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 14:06:13][354505623905114][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:06:13][354505623905114][510 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 979\nsuccessfulTxPacketsPerSecond: 2.485113111076138\nretriedTxPackets: 165\nretriedTxPacketsPerSecond: 0.3403763171282487\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 995\nsuccessfulRxPacketsPerSecond: 2.682750972634476\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:06:13][354505623905114][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:06:13][354505623905114][776 ms][DEBUG] SU: done in 265 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=157 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 157.990/157.990/157.990/0.000 ms\n [2025-09-08 14:06:13][354505623905114][776 ms][DEBUG] check_internet: online [2025-09-08 14:06:13][354505623905114][776 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:06:13][354505623905114][776 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505623905114\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4997\"}'\'' -e'"" [2025-09-08 14:06:13][354505623905114][776 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:06:13][354505623905114][776 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505623905114\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4997\"}'\'' -e'"" [2025-09-08 14:06:18][354505623905114][5884 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b202c1e7-9617-4ca9-ba9d-f58ce9c91a11","id":"QR_b202c1e7-9617-4ca9-ba9d-f58ce9c91a11","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:06:18][354505623905114][6040 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-08 14:06:18][354505623905114][6040 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-09-08 14:06:18][354505623905114][6040 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:08:03][356414819667430][0 ms][INFO] === Request start === [2025-09-08 14:08:03][356414819667430][1 ms][DEBUG] START check_scloud [2025-09-08 14:08:03][356414819667430][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:08:04][356414819667430][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 27047 23302 24312544 124320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:08:04][356414819667430][319 ms][DEBUG] targetPkg: running [2025-09-08 14:08:04][356414819667430][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 14:08:04][356414819667430][319 ms][DEBUG] START check_boot_completed [2025-09-08 14:08:04][356414819667430][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:08:04][356414819667430][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:08:04][356414819667430][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:08:04][356414819667430][414 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 14:08:04][356414819667430][414 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 14:08:04][356414819667430][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:08:04][356414819667430][522 ms][DEBUG] SU: done in 107 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 979\nsuccessfulTxPacketsPerSecond: 2.485113111076138\nretriedTxPackets: 165\nretriedTxPacketsPerSecond: 0.3403763171282487\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 995\nsuccessfulRxPacketsPerSecond: 2.682750972634476\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:08:04][356414819667430][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:08:04][356414819667430][928 ms][DEBUG] SU: done in 406 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.072/269.072/269.072/0.000 ms\n [2025-09-08 14:08:04][356414819667430][928 ms][DEBUG] check_internet: online [2025-09-08 14:08:04][356414819667430][928 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:08:04][356414819667430][928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819667430\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3313\"}'\'' -e'"" [2025-09-08 14:08:04][356414819667430][928 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:08:04][356414819667430][929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819667430\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3313\"}'\'' -e'"" [2025-09-08 14:08:09][356414819667430][5567 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f2f6b91-0f51-402a-9303-5e6cca8ee6b1","id":"QR_3f2f6b91-0f51-402a-9303-5e6cca8ee6b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:08:09][356414819667430][5723 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 14:08:09][356414819667430][5723 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 14:08:09][356414819667430][5723 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:08:11][356414819667430][1 ms][INFO] === Request start === [2025-09-08 14:08:11][356414819667430][1 ms][DEBUG] START check_scloud [2025-09-08 14:08:11][356414819667430][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:08:12][356414819667430][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 27047 23302 24432360 135080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:08:12][356414819667430][279 ms][DEBUG] targetPkg: running [2025-09-08 14:08:12][356414819667430][279 ms][DEBUG] END check_scloud in 278 ms [2025-09-08 14:08:12][356414819667430][279 ms][DEBUG] START check_boot_completed [2025-09-08 14:08:12][356414819667430][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:08:12][356414819667430][310 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 14:08:12][356414819667430][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:08:12][356414819667430][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:08:12][356414819667430][357 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 14:08:12][356414819667430][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:08:12][356414819667430][482 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 979\nsuccessfulTxPacketsPerSecond: 2.485113111076138\nretriedTxPackets: 165\nretriedTxPacketsPerSecond: 0.3403763171282487\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 995\nsuccessfulRxPacketsPerSecond: 2.682750972634476\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:08:12][356414819667430][483 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:08:12][356414819667430][748 ms][DEBUG] SU: done in 265 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.255/164.255/164.255/0.000 ms\n [2025-09-08 14:08:12][356414819667430][748 ms][DEBUG] check_internet: online [2025-09-08 14:08:12][356414819667430][748 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:08:12][356414819667430][748 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819667430\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7895\"}'\'' -e'"" [2025-09-08 14:08:12][356414819667430][748 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:08:12][356414819667430][748 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819667430\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7895\"}'\'' -e'"" [2025-09-08 14:08:17][356414819667430][5871 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7db43dea-7cf8-43bc-bf91-af975c6fb9d6","id":"QR_7db43dea-7cf8-43bc-bf91-af975c6fb9d6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:08:17][356414819667430][6028 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-09-08 14:08:17][356414819667430][6028 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-09-08 14:08:17][356414819667430][6028 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:08:22][352539591276473][0 ms][INFO] === Request start === [2025-09-08 14:08:22][352539591276473][1 ms][DEBUG] START check_scloud [2025-09-08 14:08:22][352539591276473][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:08:22][352539591276473][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 27047 23302 24587940 149412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:08:22][352539591276473][273 ms][DEBUG] targetPkg: running [2025-09-08 14:08:22][352539591276473][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-08 14:08:22][352539591276473][273 ms][DEBUG] START check_boot_completed [2025-09-08 14:08:22][352539591276473][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:08:22][352539591276473][319 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:08:22][352539591276473][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:08:22][352539591276473][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:08:22][352539591276473][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:08:22][352539591276473][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:08:22][352539591276473][476 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 979\nsuccessfulTxPacketsPerSecond: 2.485113111076138\nretriedTxPackets: 165\nretriedTxPacketsPerSecond: 0.3403763171282487\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 995\nsuccessfulRxPacketsPerSecond: 2.682750972634476\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:08:22][352539591276473][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:08:22][352539591276473][821 ms][DEBUG] SU: done in 345 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=244 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 244.126/244.126/244.126/0.000 ms\n [2025-09-08 14:08:22][352539591276473][821 ms][DEBUG] check_internet: online [2025-09-08 14:08:22][352539591276473][821 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:08:22][352539591276473][821 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539591276473\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9502\"}'\'' -e'"" [2025-09-08 14:08:22][352539591276473][822 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:08:22][352539591276473][822 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539591276473\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9502\"}'\'' -e'"" [2025-09-08 14:08:26][352539591276473][4146 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ad98448-7dae-4ec7-b9b3-e268c2678ed1","id":"QR_0ad98448-7dae-4ec7-b9b3-e268c2678ed1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:08:26][352539591276473][4303 ms][DEBUG] proc_open done in 3481 ms; code=255; res.len=3343 [2025-09-08 14:08:26][352539591276473][4303 ms][DEBUG] END runCmdUntilRes#1 in 3481 ms [2025-09-08 14:08:26][352539591276473][4303 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:08:28][352539591276473][0 ms][INFO] === Request start === [2025-09-08 14:08:28][352539591276473][1 ms][DEBUG] START check_scloud [2025-09-08 14:08:28][352539591276473][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:08:29][352539591276473][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 27047 23302 24734344 156096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:08:29][352539591276473][325 ms][DEBUG] targetPkg: running [2025-09-08 14:08:29][352539591276473][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 14:08:29][352539591276473][325 ms][DEBUG] START check_boot_completed [2025-09-08 14:08:29][352539591276473][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:08:29][352539591276473][371 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:08:29][352539591276473][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:08:29][352539591276473][418 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:08:29][352539591276473][418 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:08:29][352539591276473][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:08:29][352539591276473][529 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 979\nsuccessfulTxPacketsPerSecond: 2.485113111076138\nretriedTxPackets: 165\nretriedTxPacketsPerSecond: 0.3403763171282487\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 995\nsuccessfulRxPacketsPerSecond: 2.682750972634476\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:08:29][352539591276473][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:08:29][352539591276473][903 ms][DEBUG] SU: done in 373 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.127/252.127/252.127/0.000 ms\n [2025-09-08 14:08:29][352539591276473][903 ms][DEBUG] check_internet: online [2025-09-08 14:08:29][352539591276473][903 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:08:29][352539591276473][903 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539591276473\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9193\"}'\'' -e'"" [2025-09-08 14:08:29][352539591276473][903 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:08:29][352539591276473][903 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539591276473\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9193\"}'\'' -e'"" [2025-09-08 14:08:33][352539591276473][5136 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34f4d492-58b7-4308-80bb-ec48590980c0","id":"QR_34f4d492-58b7-4308-80bb-ec48590980c0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:08:33][352539591276473][5292 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-08 14:08:33][352539591276473][5292 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-08 14:08:33][352539591276473][5292 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:09:03][354321593661848][0 ms][INFO] === Request start === [2025-09-08 14:09:03][354321593661848][1 ms][DEBUG] START check_scloud [2025-09-08 14:09:03][354321593661848][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:09:03][354321593661848][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 27047 23302 24837924 168408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:09:03][354321593661848][290 ms][DEBUG] targetPkg: running [2025-09-08 14:09:03][354321593661848][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 14:09:03][354321593661848][290 ms][DEBUG] START check_boot_completed [2025-09-08 14:09:03][354321593661848][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:09:03][354321593661848][336 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:09:03][354321593661848][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:09:03][354321593661848][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:09:03][354321593661848][383 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 14:09:03][354321593661848][383 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:09:03][354321593661848][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321593661848\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2367\"}'\'' -e'"" [2025-09-08 14:09:03][354321593661848][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:09:03][354321593661848][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321593661848\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2367\"}'\'' -e'"" [2025-09-08 14:09:07][354321593661848][3851 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_caa51ca7-3ad9-4396-b0e6-735ba9fd600e","id":"QR_caa51ca7-3ad9-4396-b0e6-735ba9fd600e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:09:07][354321593661848][4007 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=3343 [2025-09-08 14:09:07][354321593661848][4007 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-08 14:09:07][354321593661848][4007 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:09:09][354321593661848][0 ms][INFO] === Request start === [2025-09-08 14:09:09][354321593661848][1 ms][DEBUG] START check_scloud [2025-09-08 14:09:09][354321593661848][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:09:10][354321593661848][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 27047 23302 24968108 179344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:09:10][354321593661848][288 ms][DEBUG] targetPkg: running [2025-09-08 14:09:10][354321593661848][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-08 14:09:10][354321593661848][288 ms][DEBUG] START check_boot_completed [2025-09-08 14:09:10][354321593661848][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:09:10][354321593661848][333 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 14:09:10][354321593661848][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:09:10][354321593661848][397 ms][DEBUG] SU: done in 64 ms; out [2025-09-08 14:09:10][354321593661848][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:09:10][354321593661848][397 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:09:10][354321593661848][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321593661848\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1990\"}'\'' -e'"" [2025-09-08 14:09:10][354321593661848][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:09:10][354321593661848][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321593661848\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1990\"}'\'' -e'"" [2025-09-08 14:09:14][354321593661848][4831 ms][DEBUG] proc_open done in 4434 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 14:09:14][354321593661848][4831 ms][DEBUG] END runCmdUntilRes#1 in 4435 ms [2025-09-08 14:09:14][354321593661848][4832 ms][WARN] Detected error: Process with pid 27047 either refused to load frida-agent, or terminated during injectionProcess with pid 27047 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 14:09:14][354321593661848][4832 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 14:09:14][354321593661848][5081 ms][DEBUG] SU: done in 250 ms; outsystem 23504 23302 13073744 573588 ep_poll 0 S system_server\n [2025-09-08 14:09:14][354321593661848][5082 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 14:09:15][354321593661848][5222 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 14:09:15][354321593661848][5222 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 14:09:15][354321593661848][5222 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 14:09:15][354321593661848][5362 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 14:09:15][354321593661848][5362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 14:09:15][354321593661848][5534 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 14:09:17][354321593661848][7549 ms][DEBUG] START check_boot_completed [2025-09-08 14:09:17][354321593661848][7550 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:09:17][354321593661848][7596 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:09:17][354321593661848][7596 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:09:17][354321593661848][7643 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:09:17][354321593661848][7643 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 14:09:20][354321593661848][10658 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 14:09:20][354321593661848][10658 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321593661848\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1990\"}'\'' -e'"" [2025-09-08 14:09:25][354321593661848][15532 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31f33973-72cf-4156-af09-eb740b99ecab","id":"QR_31f33973-72cf-4156-af09-eb740b99ecab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:09:25][354321593661848][15688 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-08 14:09:25][354321593661848][15688 ms][DEBUG] END runCmdUntilRes#2 in 5030 ms [2025-09-08 14:09:25][354321593661848][15688 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:09:29][354068195486260][0 ms][INFO] === Request start === [2025-09-08 14:09:29][354068195486260][1 ms][DEBUG] START check_scloud [2025-09-08 14:09:29][354068195486260][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:09:29][354068195486260][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 3985 23302 23827388 126220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:09:29][354068195486260][266 ms][DEBUG] targetPkg: running [2025-09-08 14:09:29][354068195486260][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-08 14:09:29][354068195486260][266 ms][DEBUG] START check_boot_completed [2025-09-08 14:09:29][354068195486260][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:09:29][354068195486260][313 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:09:29][354068195486260][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:09:30][354068195486260][359 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:09:30][354068195486260][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:09:30][354068195486260][359 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:09:30][354068195486260][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195486260\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7641\"}'\'' -e'"" [2025-09-08 14:09:30][354068195486260][360 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:09:30][354068195486260][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195486260\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7641\"}'\'' -e'"" [2025-09-08 14:09:34][354068195486260][4608 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3867d1d-a9f7-4444-b67c-9ba1db05690e","id":"QR_f3867d1d-a9f7-4444-b67c-9ba1db05690e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:09:34][354068195486260][4765 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-09-08 14:09:34][354068195486260][4765 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-09-08 14:09:34][354068195486260][4765 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:09:36][354068195486260][0 ms][INFO] === Request start === [2025-09-08 14:09:36][354068195486260][1 ms][DEBUG] START check_scloud [2025-09-08 14:09:36][354068195486260][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:09:37][354068195486260][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 3985 23302 24022352 139900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:09:37][354068195486260][268 ms][DEBUG] targetPkg: running [2025-09-08 14:09:37][354068195486260][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-08 14:09:37][354068195486260][268 ms][DEBUG] START check_boot_completed [2025-09-08 14:09:37][354068195486260][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:09:37][354068195486260][299 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 14:09:37][354068195486260][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:09:37][354068195486260][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:09:37][354068195486260][346 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 14:09:37][354068195486260][347 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:09:37][354068195486260][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195486260\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9433\"}'\'' -e'"" [2025-09-08 14:09:37][354068195486260][347 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:09:37][354068195486260][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195486260\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9433\"}'\'' -e'"" [2025-09-08 14:09:41][354068195486260][5142 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e777a3c-280e-4abc-acdd-ab9c4ed5186d","id":"QR_3e777a3c-280e-4abc-acdd-ab9c4ed5186d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:09:42][354068195486260][5298 ms][DEBUG] proc_open done in 4951 ms; code=255; res.len=3343 [2025-09-08 14:09:42][354068195486260][5298 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-08 14:09:42][354068195486260][5298 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:13:03][352288962616830][1 ms][INFO] === Request start === [2025-09-08 14:13:03][352288962616830][1 ms][DEBUG] START check_scloud [2025-09-08 14:13:03][352288962616830][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:13:04][352288962616830][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 3985 23302 24059980 152452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:13:04][352288962616830][313 ms][DEBUG] targetPkg: running [2025-09-08 14:13:04][352288962616830][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 14:13:04][352288962616830][313 ms][DEBUG] START check_boot_completed [2025-09-08 14:13:04][352288962616830][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:13:04][352288962616830][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 14:13:04][352288962616830][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:13:04][352288962616830][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:13:04][352288962616830][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 14:13:04][352288962616830][391 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:13:04][352288962616830][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962616830\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5590\"}'\'' -e'"" [2025-09-08 14:13:04][352288962616830][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:13:04][352288962616830][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962616830\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5590\"}'\'' -e'"" [2025-09-08 14:13:09][352288962616830][5359 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7fe515d0-6c12-4797-9ed2-4dcce8ad3f66","id":"QR_7fe515d0-6c12-4797-9ed2-4dcce8ad3f66","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:13:09][352288962616830][5515 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-08 14:13:09][352288962616830][5515 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-08 14:13:09][352288962616830][5515 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:13:11][352288962616830][0 ms][INFO] === Request start === [2025-09-08 14:13:11][352288962616830][1 ms][DEBUG] START check_scloud [2025-09-08 14:13:11][352288962616830][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:13:12][352288962616830][293 ms][DEBUG] SU: done in 293 ms; outu0_a118 3985 23302 24214740 163276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:13:12][352288962616830][293 ms][DEBUG] targetPkg: running [2025-09-08 14:13:12][352288962616830][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-08 14:13:12][352288962616830][294 ms][DEBUG] START check_boot_completed [2025-09-08 14:13:12][352288962616830][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:13:12][352288962616830][340 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:13:12][352288962616830][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:13:12][352288962616830][403 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:13:12][352288962616830][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:13:12][352288962616830][403 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:13:12][352288962616830][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962616830\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8547\"}'\'' -e'"" [2025-09-08 14:13:12][352288962616830][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:13:12][352288962616830][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962616830\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8547\"}'\'' -e'"" [2025-09-08 14:13:17][352288962616830][5464 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7bc83512-5520-4f07-bbca-c73596ca7014","id":"QR_7bc83512-5520-4f07-bbca-c73596ca7014","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:13:17][352288962616830][5620 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-08 14:13:17][352288962616830][5620 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-08 14:13:17][352288962616830][5620 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:16:05][350547663441596][1 ms][INFO] === Request start === [2025-09-08 14:16:05][350547663441596][1 ms][DEBUG] START check_scloud [2025-09-08 14:16:05][350547663441596][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:16:05][350547663441596][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 3985 23302 24310036 174072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:16:05][350547663441596][307 ms][DEBUG] targetPkg: running [2025-09-08 14:16:05][350547663441596][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 14:16:05][350547663441596][307 ms][DEBUG] START check_boot_completed [2025-09-08 14:16:05][350547663441596][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:16:05][350547663441596][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:16:05][350547663441596][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:16:05][350547663441596][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:16:05][350547663441596][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:16:05][350547663441596][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:16:05][350547663441596][572 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1446\nsuccessfulTxPacketsPerSecond: 0.4250458252530351\nretriedTxPackets: 302\nretriedTxPacketsPerSecond: 0.1095821268230481\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1397\nsuccessfulRxPacketsPerSecond: 0.3719150970964057\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:16:05][350547663441596][572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:16:07][350547663441596][2244 ms][DEBUG] SU: done in 1672 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.725/205.725/205.725/0.000 ms\n [2025-09-08 14:16:07][350547663441596][2244 ms][DEBUG] check_internet: online [2025-09-08 14:16:07][350547663441596][2244 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:16:07][350547663441596][2244 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547663441596\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3916\"}'\'' -e'"" [2025-09-08 14:16:07][350547663441596][2244 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:16:07][350547663441596][2244 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547663441596\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3916\"}'\'' -e'"" [2025-09-08 14:16:12][350547663441596][7492 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_954af79d-c808-4140-b783-41fb10847c54","id":"QR_954af79d-c808-4140-b783-41fb10847c54","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:16:12][350547663441596][7649 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-08 14:16:12][350547663441596][7649 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-08 14:16:12][350547663441596][7649 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:16:16][350547663441596][1 ms][INFO] === Request start === [2025-09-08 14:16:16][350547663441596][1 ms][DEBUG] START check_scloud [2025-09-08 14:16:16][350547663441596][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:16:16][350547663441596][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 3985 23302 24481308 185936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:16:16][350547663441596][299 ms][DEBUG] targetPkg: running [2025-09-08 14:16:16][350547663441596][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 14:16:16][350547663441596][299 ms][DEBUG] START check_boot_completed [2025-09-08 14:16:16][350547663441596][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:16:16][350547663441596][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 14:16:16][350547663441596][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:16:16][350547663441596][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:16:16][350547663441596][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 14:16:16][350547663441596][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:16:16][350547663441596][487 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1446\nsuccessfulTxPacketsPerSecond: 0.4250458252530351\nretriedTxPackets: 302\nretriedTxPacketsPerSecond: 0.1095821268230481\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1397\nsuccessfulRxPacketsPerSecond: 0.3719150970964057\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:16:16][350547663441596][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:16:17][350547663441596][877 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=274 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 274.189/274.189/274.189/0.000 ms\n [2025-09-08 14:16:17][350547663441596][878 ms][DEBUG] check_internet: online [2025-09-08 14:16:17][350547663441596][878 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:16:17][350547663441596][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547663441596\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3461\"}'\'' -e'"" [2025-09-08 14:16:17][350547663441596][878 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:16:17][350547663441596][878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547663441596\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3461\"}'\'' -e'"" [2025-09-08 14:16:21][350547663441596][5220 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f9ec44f-022b-4d2e-a487-0a1fd9c6b496","id":"QR_5f9ec44f-022b-4d2e-a487-0a1fd9c6b496","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:16:21][350547663441596][5376 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-09-08 14:16:21][350547663441596][5376 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-09-08 14:16:21][350547663441596][5377 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:17:08][352665183708068][0 ms][INFO] === Request start === [2025-09-08 14:17:08][352665183708068][1 ms][DEBUG] START check_scloud [2025-09-08 14:17:08][352665183708068][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:17:09][352665183708068][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 3985 23302 24611548 197060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:17:09][352665183708068][271 ms][DEBUG] targetPkg: running [2025-09-08 14:17:09][352665183708068][271 ms][DEBUG] END check_scloud in 271 ms [2025-09-08 14:17:09][352665183708068][271 ms][DEBUG] START check_boot_completed [2025-09-08 14:17:09][352665183708068][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:17:09][352665183708068][316 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 14:17:09][352665183708068][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:17:09][352665183708068][363 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:17:09][352665183708068][363 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 14:17:09][352665183708068][363 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:17:09][352665183708068][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665183708068\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1755\"}'\'' -e'"" [2025-09-08 14:17:09][352665183708068][363 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:17:09][352665183708068][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665183708068\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1755\"}'\'' -e'"" [2025-09-08 14:17:14][352665183708068][5300 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b4ba914-e507-46d0-a2d1-ede2803df6c2","id":"QR_9b4ba914-e507-46d0-a2d1-ede2803df6c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:17:14][352665183708068][5456 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-08 14:17:14][352665183708068][5456 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-08 14:17:14][352665183708068][5456 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:22:04][350805650256389][1 ms][INFO] === Request start === [2025-09-08 14:22:04][350805650256389][1 ms][DEBUG] START check_scloud [2025-09-08 14:22:04][350805650256389][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:22:04][350805650256389][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 3985 23302 24766400 208708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:22:04][350805650256389][321 ms][DEBUG] targetPkg: running [2025-09-08 14:22:04][350805650256389][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-08 14:22:04][350805650256389][321 ms][DEBUG] START check_boot_completed [2025-09-08 14:22:04][350805650256389][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:22:04][350805650256389][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 14:22:04][350805650256389][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:22:04][350805650256389][400 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 14:22:04][350805650256389][400 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 14:22:04][350805650256389][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:22:04][350805650256389][524 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1530\nsuccessfulTxPacketsPerSecond: 0.644324954552079\nretriedTxPackets: 322\nretriedTxPacketsPerSecond: 0.15341070346478075\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1472\nsuccessfulRxPacketsPerSecond: 0.5752901379929277\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:22:04][350805650256389][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:22:06][350805650256389][2789 ms][DEBUG] SU: done in 2265 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.577/198.577/198.577/0.000 ms\n [2025-09-08 14:22:06][350805650256389][2789 ms][DEBUG] check_internet: online [2025-09-08 14:22:06][350805650256389][2790 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:22:06][350805650256389][2790 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650256389\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1628\"}'\'' -e'"" [2025-09-08 14:22:06][350805650256389][2790 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:22:06][350805650256389][2790 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650256389\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1628\"}'\'' -e'"" [2025-09-08 14:22:10][350805650256389][6726 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f3d4093-fbee-47b2-a00f-0b62eafa754a","id":"QR_1f3d4093-fbee-47b2-a00f-0b62eafa754a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:22:10][350805650256389][6882 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-09-08 14:22:10][350805650256389][6882 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-09-08 14:22:10][350805650256389][6882 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:22:13][350805650256389][0 ms][INFO] === Request start === [2025-09-08 14:22:13][350805650256389][1 ms][DEBUG] START check_scloud [2025-09-08 14:22:13][350805650256389][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:22:13][350805650256389][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 3985 23302 24915144 211276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:22:13][350805650256389][326 ms][DEBUG] targetPkg: running [2025-09-08 14:22:13][350805650256389][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-08 14:22:13][350805650256389][326 ms][DEBUG] START check_boot_completed [2025-09-08 14:22:13][350805650256389][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:22:13][350805650256389][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:22:13][350805650256389][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:22:13][350805650256389][435 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 14:22:13][350805650256389][435 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:22:13][350805650256389][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:22:13][350805650256389][546 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1669\nsuccessfulTxPacketsPerSecond: 0.46159772588400944\nretriedTxPackets: 359\nretriedTxPacketsPerSecond: 0.12287133710581546\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1592\nsuccessfulRxPacketsPerSecond: 0.3985016338566988\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:22:13][350805650256389][546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:22:14][350805650256389][950 ms][DEBUG] SU: done in 404 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=274 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 274.793/274.793/274.793/0.000 ms\n [2025-09-08 14:22:14][350805650256389][950 ms][DEBUG] check_internet: online [2025-09-08 14:22:14][350805650256389][950 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:22:14][350805650256389][950 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650256389\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6321\"}'\'' -e'"" [2025-09-08 14:22:14][350805650256389][950 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:22:14][350805650256389][951 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650256389\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6321\"}'\'' -e'"" [2025-09-08 14:22:19][350805650256389][5793 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4f9666c-2b6c-4887-b366-0c0b417e19d1","id":"QR_c4f9666c-2b6c-4887-b366-0c0b417e19d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:22:19][350805650256389][5949 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-08 14:22:19][350805650256389][5949 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-08 14:22:19][350805650256389][5949 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:22:24][351123904094179][0 ms][INFO] === Request start === [2025-09-08 14:22:24][351123904094179][1 ms][DEBUG] START check_scloud [2025-09-08 14:22:24][351123904094179][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:22:24][351123904094179][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 3985 23302 25057492 216728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:22:24][351123904094179][313 ms][DEBUG] targetPkg: running [2025-09-08 14:22:24][351123904094179][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 14:22:24][351123904094179][313 ms][DEBUG] START check_boot_completed [2025-09-08 14:22:24][351123904094179][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:22:24][351123904094179][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 14:22:24][351123904094179][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:22:24][351123904094179][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:22:24][351123904094179][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 14:22:24][351123904094179][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:22:25][351123904094179][501 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1669\nsuccessfulTxPacketsPerSecond: 0.46159772588400944\nretriedTxPackets: 359\nretriedTxPacketsPerSecond: 0.12287133710581546\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1592\nsuccessfulRxPacketsPerSecond: 0.3985016338566988\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:22:25][351123904094179][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:22:25][351123904094179][767 ms][DEBUG] SU: done in 266 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=166 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 166.361/166.361/166.361/0.000 ms\n [2025-09-08 14:22:25][351123904094179][767 ms][DEBUG] check_internet: online [2025-09-08 14:22:25][351123904094179][767 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:22:25][351123904094179][767 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123904094179\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6771\"}'\'' -e'"" [2025-09-08 14:22:25][351123904094179][767 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:22:25][351123904094179][767 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123904094179\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6771\"}'\'' -e'"" [2025-09-08 14:22:30][351123904094179][5453 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7ec0b43-fce7-4e03-8aa5-0325fd6d7183","id":"QR_d7ec0b43-fce7-4e03-8aa5-0325fd6d7183","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:22:30][351123904094179][5609 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-08 14:22:30][351123904094179][5609 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-08 14:22:30][351123904094179][5609 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:22:33][351123904094179][0 ms][INFO] === Request start === [2025-09-08 14:22:33][351123904094179][1 ms][DEBUG] START check_scloud [2025-09-08 14:22:33][351123904094179][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:22:34][351123904094179][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 3985 23302 25210168 218072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:22:34][351123904094179][263 ms][DEBUG] targetPkg: running [2025-09-08 14:22:34][351123904094179][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-08 14:22:34][351123904094179][263 ms][DEBUG] START check_boot_completed [2025-09-08 14:22:34][351123904094179][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:22:34][351123904094179][310 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:22:34][351123904094179][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:22:34][351123904094179][403 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 14:22:34][351123904094179][404 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 14:22:34][351123904094179][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:22:34][351123904094179][528 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=8206760 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1669\nsuccessfulTxPacketsPerSecond: 0.46159772588400944\nretriedTxPackets: 359\nretriedTxPacketsPerSecond: 0.12287133710581546\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1592\nsuccessfulRxPacketsPerSecond: 0.3985016338566988\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:22:34][351123904094179][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:22:34][351123904094179][903 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=279 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 279.354/279.354/279.354/0.000 ms\n [2025-09-08 14:22:34][351123904094179][903 ms][DEBUG] check_internet: online [2025-09-08 14:22:34][351123904094179][904 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:22:34][351123904094179][904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123904094179\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3245\"}'\'' -e'"" [2025-09-08 14:22:34][351123904094179][904 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:22:34][351123904094179][904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123904094179\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3245\"}'\'' -e'"" [2025-09-08 14:22:38][351123904094179][4871 ms][DEBUG] proc_open done in 3967 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 14:22:38][351123904094179][4871 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-09-08 14:22:38][351123904094179][4871 ms][WARN] Detected error: Process with pid 3985 either refused to load frida-agent, or terminated during injectionProcess with pid 3985 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 14:22:38][351123904094179][4871 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 14:22:38][351123904094179][5121 ms][DEBUG] SU: done in 250 ms; outsystem 5924 1 12439060 112344 ptrace_stop 0 t system_server\nsystem 23504 23302 12771268 241300 ep_poll 0 S system_server\n [2025-09-08 14:22:38][351123904094179][5121 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 14:22:39][351123904094179][5262 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 14:22:39][351123904094179][5262 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 14:22:39][351123904094179][5262 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 14:22:39][351123904094179][5387 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 14:22:39][351123904094179][5387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 14:22:39][351123904094179][5590 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 14:22:41][351123904094179][7605 ms][DEBUG] START check_boot_completed [2025-09-08 14:22:41][351123904094179][7605 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:22:41][351123904094179][7652 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:22:41][351123904094179][7652 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:22:41][351123904094179][7699 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:22:41][351123904094179][7699 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 14:22:44][351123904094179][10713 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 14:22:44][351123904094179][10713 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123904094179\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3245\"}'\'' -e'"" [2025-09-08 14:22:45][351123904094179][11246 ms][DEBUG] proc_open done in 532 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-08 14:22:45][351123904094179][11246 ms][DEBUG] END runCmdUntilRes#2 in 532 ms [2025-09-08 14:22:45][351123904094179][11246 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-08 14:22:45][351123904094179][11246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 14:22:45][351123904094179][11510 ms][DEBUG] SU: done in 264 ms; out [2025-09-08 14:23:03][356414816451861][0 ms][INFO] === Request start === [2025-09-08 14:23:03][356414816451861][1 ms][DEBUG] START check_scloud [2025-09-08 14:23:03][356414816451861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:23:03][356414816451861][269 ms][DEBUG] SU: done in 269 ms; out [2025-09-08 14:23:03][356414816451861][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 14:23:03][356414816451861][316 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 14:23:03][356414816451861][316 ms][DEBUG] check_devices: device found [2025-09-08 14:23:03][356414816451861][316 ms][WARN] targetPkg: not running, restarting [2025-09-08 14:23:03][356414816451861][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 14:23:03][356414816451861][441 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 14:23:03][356414816451861][441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 14:23:03][356414816451861][597 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 14:23:05][356414816451861][2612 ms][DEBUG] END check_scloud in 2612 ms [2025-09-08 14:23:05][356414816451861][2612 ms][DEBUG] START check_boot_completed [2025-09-08 14:23:05][356414816451861][2613 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:23:05][356414816451861][2660 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:23:05][356414816451861][2660 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:23:05][356414816451861][2722 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:23:05][356414816451861][2722 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:23:05][356414816451861][2722 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:23:05][356414816451861][2722 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816451861\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1814\"}'\'' -e'"" [2025-09-08 14:23:05][356414816451861][2722 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:23:05][356414816451861][2722 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816451861\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1814\"}'\'' -e'"" [2025-09-08 14:23:09][356414816451861][6455 ms][DEBUG] proc_open done in 3733 ms (timeout); code=4; out.len=0 err.len=19 [2025-09-08 14:23:09][356414816451861][6455 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-08 14:23:09][356414816451861][6455 ms][WARN] Detected error: Process not foundProcess not found\r\n [2025-09-08 14:23:09][356414816451861][6455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 14:23:10][356414816451861][6972 ms][DEBUG] SU: done in 516 ms; outsystem 6434 6090 11022664 267140 0 0 S system_server\n [2025-09-08 14:23:10][356414816451861][6972 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 14:23:10][356414816451861][7315 ms][DEBUG] SU: done in 343 ms; out [2025-09-08 14:23:10][356414816451861][7315 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 14:23:10][356414816451861][7315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 14:23:10][356414816451861][7611 ms][DEBUG] SU: done in 297 ms; out [2025-09-08 14:23:10][356414816451861][7611 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 14:23:11][356414816451861][7986 ms][DEBUG] SU: done in 375 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 14:23:13][356414816451861][10001 ms][DEBUG] START check_boot_completed [2025-09-08 14:23:13][356414816451861][10001 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:23:13][356414816451861][10048 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:23:13][356414816451861][10048 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:23:13][356414816451861][10126 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 14:23:13][356414816451861][10126 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 14:23:16][356414816451861][13141 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 14:23:16][356414816451861][13141 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816451861\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1814\"}'\'' -e'"" [2025-09-08 14:23:19][356414816451861][15876 ms][DEBUG] proc_open done in 2734 ms (timeout); code=4; out.len=0 err.len=19 [2025-09-08 14:23:19][356414816451861][15876 ms][DEBUG] END runCmdUntilRes#2 in 2735 ms [2025-09-08 14:23:19][356414816451861][15876 ms][WARN] Detected error 2; Reboot the device [2025-09-08 14:23:19][356414816451861][15876 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 14:23:19][356414816451861][16172 ms][DEBUG] SU: done in 296 ms; outsystem 6434 6090 11923576 488936 ep_poll 0 S system_server\n [2025-09-08 14:23:19][356414816451861][16172 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-08 14:23:20][356414816451861][17640 ms][DEBUG] SU: done in 1468 ms; out [2025-09-08 14:24:03][356414816451861][0 ms][INFO] === Request start === [2025-09-08 14:24:03][356414816451861][0 ms][DEBUG] START check_scloud [2025-09-08 14:24:03][356414816451861][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:24:03][356414816451861][37 ms][DEBUG] SU: done in 37 ms; out [2025-09-08 14:24:03][356414816451861][37 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 14:24:03][356414816451861][68 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-08 14:24:03][356414816451861][68 ms][WARN] check_devices: no device [2025-09-08 14:24:03][356414816451861][68 ms][WARN] check_devices: no device [2025-09-08 14:24:03][356414816451861][68 ms][DEBUG] END check_scloud in 68 ms [2025-09-08 14:25:04][356414816451861][1 ms][INFO] === Request start === [2025-09-08 14:25:04][356414816451861][1 ms][DEBUG] START check_scloud [2025-09-08 14:25:04][356414816451861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:25:04][356414816451861][366 ms][DEBUG] SU: done in 365 ms; out [2025-09-08 14:25:04][356414816451861][367 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 14:25:04][356414816451861][413 ms][DEBUG] ADB: done in 46 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 14:25:04][356414816451861][413 ms][DEBUG] check_devices: device found [2025-09-08 14:25:04][356414816451861][413 ms][WARN] targetPkg: not running, restarting [2025-09-08 14:25:04][356414816451861][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 14:25:04][356414816451861][539 ms][DEBUG] SU: done in 126 ms; out [2025-09-08 14:25:04][356414816451861][539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 14:25:04][356414816451861][834 ms][DEBUG] SU: done in 296 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 14:25:06][356414816451861][2849 ms][DEBUG] END check_scloud in 2848 ms [2025-09-08 14:25:06][356414816451861][2850 ms][DEBUG] START check_boot_completed [2025-09-08 14:25:06][356414816451861][2850 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:25:06][356414816451861][2896 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:25:06][356414816451861][2897 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:25:07][356414816451861][2975 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 14:25:07][356414816451861][2975 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 14:25:07][356414816451861][2975 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:25:07][356414816451861][2975 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816451861\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9144\"}'\'' -e'"" [2025-09-08 14:25:07][356414816451861][2975 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:25:07][356414816451861][2975 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816451861\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9144\"}'\'' -e'"" [2025-09-08 14:25:13][356414816451861][9332 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-08 14:25:13][356414816451861][9488 ms][DEBUG] proc_open done in 6513 ms; code=255; res.len=101 [2025-09-08 14:25:13][356414816451861][9488 ms][DEBUG] END runCmdUntilRes#1 in 6514 ms [2025-09-08 14:25:13][356414816451861][9489 ms][INFO] SUCCESS response from frida (len=101) [2025-09-08 14:25:13][][0 ms][INFO] === Request start === [2025-09-08 14:25:13][][1 ms][DEBUG] START check_scloud [2025-09-08 14:25:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:25:14][][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 11376 4972 23581376 120232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:25:14][][316 ms][DEBUG] targetPkg: running [2025-09-08 14:25:14][][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 14:25:14][][316 ms][DEBUG] START check_boot_completed [2025-09-08 14:25:14][][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:25:14][][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:25:14][][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:25:14][][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:25:14][][409 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 14:25:14][][409 ms][DEBUG] rawBody.length=1131 [2025-09-08 14:25:14][][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W10EJ5CL\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4748\"}'\'' -e'"" [2025-09-08 14:25:14][][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:25:14][][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W10EJ5CL\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4748\"}'\'' -e'"" [2025-09-08 14:25:17][][3783 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-08 14:25:17][][3939 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=101 [2025-09-08 14:25:17][][3939 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-08 14:25:17][][3939 ms][INFO] SUCCESS response from frida (len=101) [2025-09-08 14:25:19][356414816451861][0 ms][INFO] === Request start === [2025-09-08 14:25:19][356414816451861][1 ms][DEBUG] START check_scloud [2025-09-08 14:25:19][356414816451861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:25:19][356414816451861][328 ms][DEBUG] SU: done in 328 ms; outu0_a118 11376 4972 23753672 117692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:25:19][356414816451861][328 ms][DEBUG] targetPkg: running [2025-09-08 14:25:19][356414816451861][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-08 14:25:19][356414816451861][329 ms][DEBUG] START check_boot_completed [2025-09-08 14:25:19][356414816451861][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:25:19][356414816451861][375 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:25:19][356414816451861][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:25:19][356414816451861][438 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:25:19][356414816451861][438 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:25:19][356414816451861][438 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:25:19][356414816451861][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816451861\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5124\"}'\'' -e'"" [2025-09-08 14:25:19][356414816451861][438 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:25:19][356414816451861][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816451861\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5124\"}'\'' -e'"" [2025-09-08 14:25:24][356414816451861][5108 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_199097eb-3905-428b-bd76-d195059c63ef","id":"QR_199097eb-3905-428b-bd76-d195059c63ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:25:24][356414816451861][5265 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-08 14:25:24][356414816451861][5265 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-08 14:25:24][356414816451861][5265 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:25:28][356414816451861][0 ms][INFO] === Request start === [2025-09-08 14:25:28][356414816451861][1 ms][DEBUG] START check_scloud [2025-09-08 14:25:28][356414816451861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:25:28][356414816451861][288 ms][DEBUG] SU: done in 288 ms; outu0_a118 11376 4972 23941212 127124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:25:28][356414816451861][289 ms][DEBUG] targetPkg: running [2025-09-08 14:25:28][356414816451861][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-08 14:25:28][356414816451861][289 ms][DEBUG] START check_boot_completed [2025-09-08 14:25:28][356414816451861][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:25:28][356414816451861][335 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:25:28][356414816451861][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:25:28][356414816451861][398 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:25:28][356414816451861][398 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:25:28][356414816451861][398 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:25:28][356414816451861][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816451861\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6496\"}'\'' -e'"" [2025-09-08 14:25:28][356414816451861][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:25:28][356414816451861][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816451861\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6496\"}'\'' -e'"" [2025-09-08 14:25:31][356414816451861][3772 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-08 14:25:32][356414816451861][3928 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=101 [2025-09-08 14:25:32][356414816451861][3928 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-08 14:25:32][356414816451861][3928 ms][INFO] SUCCESS response from frida (len=101) [2025-09-08 14:25:32][][0 ms][INFO] === Request start === [2025-09-08 14:25:32][][1 ms][DEBUG] START check_scloud [2025-09-08 14:25:32][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:25:32][][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 11376 4972 24102272 109928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:25:32][][332 ms][DEBUG] targetPkg: running [2025-09-08 14:25:32][][332 ms][DEBUG] END check_scloud in 331 ms [2025-09-08 14:25:32][][332 ms][DEBUG] START check_boot_completed [2025-09-08 14:25:32][][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:25:32][][363 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 14:25:32][][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:25:32][][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:25:32][][426 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 14:25:32][][426 ms][DEBUG] rawBody.length=1131 [2025-09-08 14:25:32][][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W10EJ5CL\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5483\"}'\'' -e'"" [2025-09-08 14:25:32][][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:25:32][][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W10EJ5CL\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5483\"}'\'' -e'"" [2025-09-08 14:25:35][][3597 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-08 14:25:36][][3753 ms][DEBUG] proc_open done in 3327 ms; code=255; res.len=101 [2025-09-08 14:25:36][][3753 ms][DEBUG] END runCmdUntilRes#1 in 3327 ms [2025-09-08 14:25:36][][3753 ms][INFO] SUCCESS response from frida (len=101) [2025-09-08 14:27:03][350103379737180][0 ms][INFO] === Request start === [2025-09-08 14:27:03][350103379737180][1 ms][DEBUG] START check_scloud [2025-09-08 14:27:03][350103379737180][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:27:04][350103379737180][406 ms][DEBUG] SU: done in 405 ms; out [2025-09-08 14:27:04][350103379737180][406 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 14:27:04][350103379737180][453 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 14:27:04][350103379737180][453 ms][DEBUG] check_devices: device found [2025-09-08 14:27:04][350103379737180][453 ms][WARN] targetPkg: not running, restarting [2025-09-08 14:27:04][350103379737180][453 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 14:27:04][350103379737180][578 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 14:27:04][350103379737180][578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 14:27:04][350103379737180][859 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 14:27:06][350103379737180][2874 ms][DEBUG] END check_scloud in 2874 ms [2025-09-08 14:27:06][350103379737180][2874 ms][DEBUG] START check_boot_completed [2025-09-08 14:27:06][350103379737180][2874 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:27:06][350103379737180][2921 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:27:06][350103379737180][2921 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:27:06][350103379737180][2983 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:27:06][350103379737180][2983 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:27:06][350103379737180][2983 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:27:06][350103379737180][2984 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350103379737180\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3893\"}'\'' -e'"" [2025-09-08 14:27:06][350103379737180][2984 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:27:06][350103379737180][2984 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350103379737180\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3893\"}'\'' -e'"" [2025-09-08 14:27:12][350103379737180][8842 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05673cb3-0eba-43d7-9b3e-e452decf0d4e","id":"QR_05673cb3-0eba-43d7-9b3e-e452decf0d4e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:27:12][350103379737180][8998 ms][DEBUG] proc_open done in 6014 ms; code=255; res.len=3343 [2025-09-08 14:27:12][350103379737180][8998 ms][DEBUG] END runCmdUntilRes#1 in 6014 ms [2025-09-08 14:27:12][350103379737180][8998 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:27:15][350103379737180][1 ms][INFO] === Request start === [2025-09-08 14:27:15][350103379737180][1 ms][DEBUG] START check_scloud [2025-09-08 14:27:15][350103379737180][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:27:15][350103379737180][346 ms][DEBUG] SU: done in 344 ms; outu0_a118 23346 15610 23659108 123332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:27:15][350103379737180][346 ms][DEBUG] targetPkg: running [2025-09-08 14:27:15][350103379737180][346 ms][DEBUG] END check_scloud in 345 ms [2025-09-08 14:27:15][350103379737180][346 ms][DEBUG] START check_boot_completed [2025-09-08 14:27:15][350103379737180][346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:27:15][350103379737180][392 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:27:15][350103379737180][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:27:15][350103379737180][439 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:27:15][350103379737180][439 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:27:15][350103379737180][439 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:27:15][350103379737180][439 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350103379737180\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7004\"}'\'' -e'"" [2025-09-08 14:27:15][350103379737180][439 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:27:15][350103379737180][439 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350103379737180\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7004\"}'\'' -e'"" [2025-09-08 14:27:21][350103379737180][6313 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_802c5312-3441-4894-a524-2054c09a8eb6","id":"QR_802c5312-3441-4894-a524-2054c09a8eb6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:27:21][350103379737180][6469 ms][DEBUG] proc_open done in 6030 ms; code=255; res.len=3343 [2025-09-08 14:27:21][350103379737180][6469 ms][DEBUG] END runCmdUntilRes#1 in 6030 ms [2025-09-08 14:27:21][350103379737180][6469 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:28:03][350040122326640][0 ms][INFO] === Request start === [2025-09-08 14:28:03][350040122326640][1 ms][DEBUG] START check_scloud [2025-09-08 14:28:03][350040122326640][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:28:03][350040122326640][364 ms][DEBUG] SU: done in 364 ms; outu0_a118 23346 15610 23758964 70896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:28:03][350040122326640][365 ms][DEBUG] targetPkg: running [2025-09-08 14:28:03][350040122326640][365 ms][DEBUG] END check_scloud in 364 ms [2025-09-08 14:28:03][350040122326640][365 ms][DEBUG] START check_boot_completed [2025-09-08 14:28:03][350040122326640][365 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:28:03][350040122326640][411 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:28:03][350040122326640][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:28:03][350040122326640][458 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:28:03][350040122326640][458 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:28:03][350040122326640][458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:28:03][350040122326640][599 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 811\nsuccessfulTxPacketsPerSecond: 11.091843307173606\nretriedTxPackets: 149\nretriedTxPacketsPerSecond: 3.0550262256048613\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 841\nsuccessfulRxPacketsPerSecond: 10.381371183835867\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:28:03][350040122326640][599 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:28:04][350040122326640][1567 ms][DEBUG] SU: done in 968 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.732/200.732/200.732/0.000 ms\n [2025-09-08 14:28:04][350040122326640][1567 ms][DEBUG] check_internet: online [2025-09-08 14:28:04][350040122326640][1567 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:28:04][350040122326640][1568 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040122326640\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2487\"}'\'' -e'"" [2025-09-08 14:28:04][350040122326640][1568 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:28:04][350040122326640][1568 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040122326640\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2487\"}'\'' -e'"" [2025-09-08 14:28:08][350040122326640][5035 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae70bb4b-1eca-42e6-8530-7692802c08b3","id":"QR_ae70bb4b-1eca-42e6-8530-7692802c08b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:28:08][350040122326640][5191 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=3343 [2025-09-08 14:28:08][350040122326640][5191 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-08 14:28:08][350040122326640][5191 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:28:10][350040122326640][0 ms][INFO] === Request start === [2025-09-08 14:28:10][350040122326640][1 ms][DEBUG] START check_scloud [2025-09-08 14:28:10][350040122326640][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:28:11][350040122326640][338 ms][DEBUG] SU: done in 338 ms; outu0_a118 23346 15610 23883004 85616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:28:11][350040122326640][339 ms][DEBUG] targetPkg: running [2025-09-08 14:28:11][350040122326640][339 ms][DEBUG] END check_scloud in 338 ms [2025-09-08 14:28:11][350040122326640][339 ms][DEBUG] START check_boot_completed [2025-09-08 14:28:11][350040122326640][339 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:28:11][350040122326640][385 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:28:11][350040122326640][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:28:11][350040122326640][433 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 14:28:11][350040122326640][433 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 14:28:11][350040122326640][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:28:11][350040122326640][573 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 811\nsuccessfulTxPacketsPerSecond: 11.091843307173606\nretriedTxPackets: 149\nretriedTxPacketsPerSecond: 3.0550262256048613\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 841\nsuccessfulRxPacketsPerSecond: 10.381371183835867\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:28:11][350040122326640][573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:28:11][350040122326640][901 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=217 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 217.440/217.440/217.440/0.000 ms\n [2025-09-08 14:28:11][350040122326640][901 ms][DEBUG] check_internet: online [2025-09-08 14:28:11][350040122326640][901 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:28:11][350040122326640][901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040122326640\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6530\"}'\'' -e'"" [2025-09-08 14:28:11][350040122326640][901 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:28:11][350040122326640][901 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040122326640\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6530\"}'\'' -e'"" [2025-09-08 14:28:16][350040122326640][5540 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c9436e5-1117-47b4-b752-c2db3e63d432","id":"QR_5c9436e5-1117-47b4-b752-c2db3e63d432","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:28:16][350040122326640][5696 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 14:28:16][350040122326640][5696 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 14:28:16][350040122326640][5696 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:28:20][353310803251889][0 ms][INFO] === Request start === [2025-09-08 14:28:20][353310803251889][0 ms][DEBUG] START check_scloud [2025-09-08 14:28:20][353310803251889][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:28:21][353310803251889][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 23346 15610 24046148 97620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:28:21][353310803251889][266 ms][DEBUG] targetPkg: running [2025-09-08 14:28:21][353310803251889][266 ms][DEBUG] END check_scloud in 266 ms [2025-09-08 14:28:21][353310803251889][266 ms][DEBUG] START check_boot_completed [2025-09-08 14:28:21][353310803251889][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:28:21][353310803251889][312 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:28:21][353310803251889][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:28:21][353310803251889][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:28:21][353310803251889][358 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 14:28:21][353310803251889][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:28:21][353310803251889][468 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 811\nsuccessfulTxPacketsPerSecond: 11.091843307173606\nretriedTxPackets: 149\nretriedTxPacketsPerSecond: 3.0550262256048613\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 841\nsuccessfulRxPacketsPerSecond: 10.381371183835867\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:28:21][353310803251889][468 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:28:21][353310803251889][780 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.517/216.517/216.517/0.000 ms\n [2025-09-08 14:28:21][353310803251889][780 ms][DEBUG] check_internet: online [2025-09-08 14:28:21][353310803251889][780 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:28:21][353310803251889][781 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803251889\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6850\"}'\'' -e'"" [2025-09-08 14:28:21][353310803251889][781 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:28:21][353310803251889][781 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803251889\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6850\"}'\'' -e'"" [2025-09-08 14:28:25][353310803251889][4420 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25a40b82-8efe-4e62-bebd-960cae81da22","id":"QR_25a40b82-8efe-4e62-bebd-960cae81da22","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:28:25][353310803251889][4576 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-09-08 14:28:25][353310803251889][4576 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-09-08 14:28:25][353310803251889][4576 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:28:27][353310803251889][0 ms][INFO] === Request start === [2025-09-08 14:28:27][353310803251889][1 ms][DEBUG] START check_scloud [2025-09-08 14:28:27][353310803251889][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:28:27][353310803251889][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 23346 15610 24179368 107636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:28:27][353310803251889][276 ms][DEBUG] targetPkg: running [2025-09-08 14:28:27][353310803251889][276 ms][DEBUG] END check_scloud in 276 ms [2025-09-08 14:28:27][353310803251889][276 ms][DEBUG] START check_boot_completed [2025-09-08 14:28:27][353310803251889][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:28:28][353310803251889][307 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 14:28:28][353310803251889][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:28:28][353310803251889][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:28:28][353310803251889][354 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 14:28:28][353310803251889][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:28:28][353310803251889][464 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 811\nsuccessfulTxPacketsPerSecond: 11.091843307173606\nretriedTxPackets: 149\nretriedTxPacketsPerSecond: 3.0550262256048613\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 841\nsuccessfulRxPacketsPerSecond: 10.381371183835867\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:28:28][353310803251889][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:28:28][353310803251889][731 ms][DEBUG] SU: done in 267 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=157 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 157.503/157.503/157.503/0.000 ms\n [2025-09-08 14:28:28][353310803251889][732 ms][DEBUG] check_internet: online [2025-09-08 14:28:28][353310803251889][732 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:28:28][353310803251889][732 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803251889\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9721\"}'\'' -e'"" [2025-09-08 14:28:28][353310803251889][732 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:28:28][353310803251889][732 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803251889\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9721\"}'\'' -e'"" [2025-09-08 14:28:33][353310803251889][5650 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7259abc8-e023-4fe6-b66a-04f41a76bcb6","id":"QR_7259abc8-e023-4fe6-b66a-04f41a76bcb6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:28:33][353310803251889][5806 ms][DEBUG] proc_open done in 5074 ms; code=255; res.len=3343 [2025-09-08 14:28:33][353310803251889][5806 ms][DEBUG] END runCmdUntilRes#1 in 5074 ms [2025-09-08 14:28:33][353310803251889][5806 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:29:04][356438300488956][0 ms][INFO] === Request start === [2025-09-08 14:29:04][356438300488956][1 ms][DEBUG] START check_scloud [2025-09-08 14:29:04][356438300488956][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:29:04][356438300488956][340 ms][DEBUG] SU: done in 339 ms; outu0_a118 23346 15610 24262340 118808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:29:04][356438300488956][340 ms][DEBUG] targetPkg: running [2025-09-08 14:29:04][356438300488956][340 ms][DEBUG] END check_scloud in 339 ms [2025-09-08 14:29:04][356438300488956][340 ms][DEBUG] START check_boot_completed [2025-09-08 14:29:04][356438300488956][340 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:29:04][356438300488956][386 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:29:04][356438300488956][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:29:04][356438300488956][450 ms][DEBUG] SU: done in 64 ms; out [2025-09-08 14:29:04][356438300488956][450 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 14:29:04][356438300488956][450 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:29:04][356438300488956][450 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356438300488956\",\"model\":\"SM-X516B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8920\"}'\'' -e'"" [2025-09-08 14:29:04][356438300488956][450 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:29:04][356438300488956][450 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356438300488956\",\"model\":\"SM-X516B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8920\"}'\'' -e'"" [2025-09-08 14:29:07][356438300488956][3776 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43d4d0d5-16b0-47b2-ae77-0a8ef673ed2e","id":"QR_43d4d0d5-16b0-47b2-ae77-0a8ef673ed2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:29:07][356438300488956][3932 ms][DEBUG] proc_open done in 3482 ms; code=255; res.len=3343 [2025-09-08 14:29:07][356438300488956][3932 ms][DEBUG] END runCmdUntilRes#1 in 3482 ms [2025-09-08 14:29:07][356438300488956][3932 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:29:10][356438300488956][0 ms][INFO] === Request start === [2025-09-08 14:29:10][356438300488956][1 ms][DEBUG] START check_scloud [2025-09-08 14:29:10][356438300488956][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:29:10][356438300488956][324 ms][DEBUG] SU: done in 324 ms; outu0_a118 23346 15610 24419584 132896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:29:10][356438300488956][324 ms][DEBUG] targetPkg: running [2025-09-08 14:29:10][356438300488956][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 14:29:10][356438300488956][325 ms][DEBUG] START check_boot_completed [2025-09-08 14:29:10][356438300488956][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:29:10][356438300488956][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:29:10][356438300488956][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:29:10][356438300488956][418 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:29:10][356438300488956][418 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:29:10][356438300488956][418 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:29:10][356438300488956][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356438300488956\",\"model\":\"SM-X516B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6788\"}'\'' -e'"" [2025-09-08 14:29:10][356438300488956][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:29:10][356438300488956][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356438300488956\",\"model\":\"SM-X516B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6788\"}'\'' -e'"" [2025-09-08 14:29:15][356438300488956][5167 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25d86f37-89d1-4f8e-a417-8a0a3ee43d3e","id":"QR_25d86f37-89d1-4f8e-a417-8a0a3ee43d3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:29:15][356438300488956][5323 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-08 14:29:15][356438300488956][5323 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-08 14:29:15][356438300488956][5323 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:31:04][352469857124052][0 ms][INFO] === Request start === [2025-09-08 14:31:04][352469857124052][0 ms][DEBUG] START check_scloud [2025-09-08 14:31:04][352469857124052][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:31:04][352469857124052][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 23346 15610 24568192 141624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:31:04][352469857124052][251 ms][DEBUG] targetPkg: running [2025-09-08 14:31:04][352469857124052][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-08 14:31:04][352469857124052][251 ms][DEBUG] START check_boot_completed [2025-09-08 14:31:04][352469857124052][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:31:04][352469857124052][296 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 14:31:04][352469857124052][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:31:04][352469857124052][343 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:31:04][352469857124052][343 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 14:31:04][352469857124052][343 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:31:04][352469857124052][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469857124052\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4285\"}'\'' -e'"" [2025-09-08 14:31:04][352469857124052][343 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:31:04][352469857124052][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469857124052\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4285\"}'\'' -e'"" [2025-09-08 14:31:09][352469857124052][5045 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d17526d-4be6-4a58-891d-1f4b2599d0b8","id":"QR_1d17526d-4be6-4a58-891d-1f4b2599d0b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:31:09][352469857124052][5201 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-08 14:31:09][352469857124052][5201 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-08 14:31:09][352469857124052][5201 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:31:12][352469857124052][0 ms][INFO] === Request start === [2025-09-08 14:31:12][352469857124052][1 ms][DEBUG] START check_scloud [2025-09-08 14:31:12][352469857124052][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:31:12][352469857124052][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 23346 15610 24739336 150560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:31:12][352469857124052][281 ms][DEBUG] targetPkg: running [2025-09-08 14:31:12][352469857124052][281 ms][DEBUG] END check_scloud in 280 ms [2025-09-08 14:31:12][352469857124052][281 ms][DEBUG] START check_boot_completed [2025-09-08 14:31:12][352469857124052][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:31:12][352469857124052][328 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:31:12][352469857124052][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:31:12][352469857124052][390 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:31:12][352469857124052][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:31:12][352469857124052][390 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:31:12][352469857124052][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469857124052\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6061\"}'\'' -e'"" [2025-09-08 14:31:12][352469857124052][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:31:12][352469857124052][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469857124052\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6061\"}'\'' -e'"" [2025-09-08 14:31:17][352469857124052][5045 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5bf7b812-b1e1-4dc1-9ee1-e4817e502fc1","id":"QR_5bf7b812-b1e1-4dc1-9ee1-e4817e502fc1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:31:17][352469857124052][5201 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-08 14:31:17][352469857124052][5201 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-08 14:31:17][352469857124052][5202 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:32:06][355857114407210][0 ms][INFO] === Request start === [2025-09-08 14:32:06][355857114407210][1 ms][DEBUG] START check_scloud [2025-09-08 14:32:06][355857114407210][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:32:06][355857114407210][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 23346 15610 24877640 160396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:32:06][355857114407210][268 ms][DEBUG] targetPkg: running [2025-09-08 14:32:06][355857114407210][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-08 14:32:06][355857114407210][268 ms][DEBUG] START check_boot_completed [2025-09-08 14:32:06][355857114407210][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:32:06][355857114407210][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:32:06][355857114407210][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:32:06][355857114407210][377 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:32:06][355857114407210][377 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:32:06][355857114407210][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:32:06][355857114407210][487 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1313\nsuccessfulTxPacketsPerSecond: 2.043549588644052\nretriedTxPackets: 242\nretriedTxPacketsPerSecond: 0.378585879967922\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1302\nsuccessfulRxPacketsPerSecond: 1.8766461361850755\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:32:06][355857114407210][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:32:06][355857114407210][862 ms][DEBUG] SU: done in 374 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.606/218.606/218.606/0.000 ms\n [2025-09-08 14:32:06][355857114407210][862 ms][DEBUG] check_internet: online [2025-09-08 14:32:06][355857114407210][862 ms][DEBUG] rawBody.length=1170 [2025-09-08 14:32:06][355857114407210][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857114407210\",\"model\":\"SM-T830\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52M70JGSME\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8407\"}'\'' -e'"" [2025-09-08 14:32:06][355857114407210][862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:32:06][355857114407210][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857114407210\",\"model\":\"SM-T830\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52M70JGSME\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8407\"}'\'' -e'"" [2025-09-08 14:32:10][355857114407210][4579 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 14:32:10][355857114407210][4735 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=115 [2025-09-08 14:32:10][355857114407210][4735 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-08 14:32:10][355857114407210][4735 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 14:32:11][356745220525455][0 ms][INFO] === Request start === [2025-09-08 14:32:11][356745220525455][1 ms][DEBUG] START check_scloud [2025-09-08 14:32:11][356745220525455][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:32:11][356745220525455][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 23346 15610 25028308 171888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:32:11][356745220525455][265 ms][DEBUG] targetPkg: running [2025-09-08 14:32:11][356745220525455][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-08 14:32:11][356745220525455][265 ms][DEBUG] START check_boot_completed [2025-09-08 14:32:11][356745220525455][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:32:11][356745220525455][311 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:32:11][356745220525455][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:32:11][356745220525455][389 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 14:32:11][356745220525455][389 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-08 14:32:11][356745220525455][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:32:11][356745220525455][499 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1313\nsuccessfulTxPacketsPerSecond: 2.043549588644052\nretriedTxPackets: 242\nretriedTxPacketsPerSecond: 0.378585879967922\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1302\nsuccessfulRxPacketsPerSecond: 1.8766461361850755\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:32:11][356745220525455][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:32:12][356745220525455][796 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.142/164.142/164.142/0.000 ms\n [2025-09-08 14:32:12][356745220525455][796 ms][DEBUG] check_internet: online [2025-09-08 14:32:12][356745220525455][796 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:32:12][356745220525455][796 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356745220525455\",\"model\":\"SM-T830\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52M70JGSME\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7117\"}'\'' -e'"" [2025-09-08 14:32:12][356745220525455][796 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:32:12][356745220525455][796 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356745220525455\",\"model\":\"SM-T830\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52M70JGSME\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7117\"}'\'' -e'"" [2025-09-08 14:32:16][356745220525455][4998 ms][DEBUG] proc_open done in 4202 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 14:32:16][356745220525455][4998 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-08 14:32:16][356745220525455][4998 ms][WARN] Detected error: Process with pid 23346 either refused to load frida-agent, or terminated during injectionProcess with pid 23346 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 14:32:16][356745220525455][4998 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 14:32:16][356745220525455][5295 ms][DEBUG] SU: done in 297 ms; outsystem 15808 15610 13129092 587384 ep_poll 0 S system_server\n [2025-09-08 14:32:16][356745220525455][5295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 14:32:16][356745220525455][5435 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 14:32:16][356745220525455][5435 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 14:32:16][356745220525455][5435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 14:32:16][356745220525455][5560 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 14:32:16][356745220525455][5560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 14:32:17][356745220525455][5748 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 14:32:19][356745220525455][7763 ms][DEBUG] START check_boot_completed [2025-09-08 14:32:19][356745220525455][7763 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:32:19][356745220525455][7810 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:32:19][356745220525455][7810 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:32:19][356745220525455][7857 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:32:19][356745220525455][7857 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 14:32:22][356745220525455][10871 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 14:32:22][356745220525455][10871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356745220525455\",\"model\":\"SM-T830\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52M70JGSME\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7117\"}'\'' -e'"" [2025-09-08 14:32:25][356745220525455][14652 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7c6bef1-3ed1-4483-9bff-30d67f89f561","id":"QR_d7c6bef1-3ed1-4483-9bff-30d67f89f561","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:32:26][356745220525455][14808 ms][DEBUG] proc_open done in 3937 ms; code=255; res.len=3343 [2025-09-08 14:32:26][356745220525455][14808 ms][DEBUG] END runCmdUntilRes#2 in 3937 ms [2025-09-08 14:32:26][356745220525455][14808 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:35:03][357435840339979][1 ms][INFO] === Request start === [2025-09-08 14:35:03][357435840339979][1 ms][DEBUG] START check_scloud [2025-09-08 14:35:03][357435840339979][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:35:04][357435840339979][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 29232 15610 23487408 127528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:35:04][357435840339979][319 ms][DEBUG] targetPkg: running [2025-09-08 14:35:04][357435840339979][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 14:35:04][357435840339979][319 ms][DEBUG] START check_boot_completed [2025-09-08 14:35:04][357435840339979][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:35:04][357435840339979][350 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 14:35:04][357435840339979][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:35:04][357435840339979][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:35:04][357435840339979][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 14:35:04][357435840339979][397 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:35:04][357435840339979][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840339979\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7363\"}'\'' -e'"" [2025-09-08 14:35:04][357435840339979][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:35:04][357435840339979][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840339979\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7363\"}'\'' -e'"" [2025-09-08 14:35:08][357435840339979][4708 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ed5f5d6-a9e7-426a-ac7e-3bd8740a9bd3","id":"QR_5ed5f5d6-a9e7-426a-ac7e-3bd8740a9bd3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:35:08][357435840339979][4865 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-09-08 14:35:08][357435840339979][4865 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-09-08 14:35:08][357435840339979][4865 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:35:10][357435840339979][0 ms][INFO] === Request start === [2025-09-08 14:35:10][357435840339979][1 ms][DEBUG] START check_scloud [2025-09-08 14:35:10][357435840339979][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:35:11][357435840339979][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 29232 15610 23613560 137528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:35:11][357435840339979][319 ms][DEBUG] targetPkg: running [2025-09-08 14:35:11][357435840339979][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 14:35:11][357435840339979][319 ms][DEBUG] START check_boot_completed [2025-09-08 14:35:11][357435840339979][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:35:11][357435840339979][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:35:11][357435840339979][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:35:11][357435840339979][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:35:11][357435840339979][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:35:11][357435840339979][429 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:35:11][357435840339979][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840339979\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7140\"}'\'' -e'"" [2025-09-08 14:35:11][357435840339979][429 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:35:11][357435840339979][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840339979\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7140\"}'\'' -e'"" [2025-09-08 14:35:16][357435840339979][5474 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23e3ba63-4fa5-4031-b518-ba0032f148ec","id":"QR_23e3ba63-4fa5-4031-b518-ba0032f148ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:35:16][357435840339979][5630 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-08 14:35:16][357435840339979][5630 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-08 14:35:16][357435840339979][5630 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:35:20][350973421887682][1 ms][INFO] === Request start === [2025-09-08 14:35:20][350973421887682][1 ms][DEBUG] START check_scloud [2025-09-08 14:35:20][350973421887682][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:35:21][350973421887682][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 29232 15610 23784704 149248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:35:21][350973421887682][293 ms][DEBUG] targetPkg: running [2025-09-08 14:35:21][350973421887682][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-08 14:35:21][350973421887682][293 ms][DEBUG] START check_boot_completed [2025-09-08 14:35:21][350973421887682][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:35:21][350973421887682][339 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:35:21][350973421887682][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:35:21][350973421887682][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:35:21][350973421887682][386 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:35:21][350973421887682][386 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:35:21][350973421887682][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973421887682\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3429\"}'\'' -e'"" [2025-09-08 14:35:21][350973421887682][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:35:21][350973421887682][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973421887682\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3429\"}'\'' -e'"" [2025-09-08 14:35:24][350973421887682][3885 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1670a23f-9e3c-4607-9bb4-108d29ed8ba5","id":"QR_1670a23f-9e3c-4607-9bb4-108d29ed8ba5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:35:24][350973421887682][4041 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-09-08 14:35:24][350973421887682][4041 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-08 14:35:24][350973421887682][4041 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:35:27][350973421887682][0 ms][INFO] === Request start === [2025-09-08 14:35:27][350973421887682][1 ms][DEBUG] START check_scloud [2025-09-08 14:35:27][350973421887682][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:35:27][350973421887682][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 29232 15610 23938788 158148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:35:27][350973421887682][299 ms][DEBUG] targetPkg: running [2025-09-08 14:35:27][350973421887682][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 14:35:27][350973421887682][299 ms][DEBUG] START check_boot_completed [2025-09-08 14:35:27][350973421887682][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:35:27][350973421887682][345 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:35:27][350973421887682][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:35:27][350973421887682][408 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:35:27][350973421887682][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:35:27][350973421887682][408 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:35:27][350973421887682][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973421887682\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7479\"}'\'' -e'"" [2025-09-08 14:35:27][350973421887682][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:35:27][350973421887682][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973421887682\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7479\"}'\'' -e'"" [2025-09-08 14:35:32][350973421887682][5204 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34facbcd-25a0-440b-92b5-f36b5ed28c7d","id":"QR_34facbcd-25a0-440b-92b5-f36b5ed28c7d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:35:32][350973421887682][5360 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-09-08 14:35:32][350973421887682][5360 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-08 14:35:32][350973421887682][5360 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:36:03][351044512042568][0 ms][INFO] === Request start === [2025-09-08 14:36:03][351044512042568][1 ms][DEBUG] START check_scloud [2025-09-08 14:36:03][351044512042568][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:36:04][351044512042568][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 29232 15610 24016888 169544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:36:04][351044512042568][317 ms][DEBUG] targetPkg: running [2025-09-08 14:36:04][351044512042568][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 14:36:04][351044512042568][318 ms][DEBUG] START check_boot_completed [2025-09-08 14:36:04][351044512042568][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:36:04][351044512042568][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:36:04][351044512042568][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:36:04][351044512042568][412 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 14:36:04][351044512042568][412 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 14:36:04][351044512042568][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:36:04][351044512042568][536 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1313\nsuccessfulTxPacketsPerSecond: 2.043549588644052\nretriedTxPackets: 242\nretriedTxPacketsPerSecond: 0.378585879967922\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1302\nsuccessfulRxPacketsPerSecond: 1.8766461361850755\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:36:04][351044512042568][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:36:06][351044512042568][2223 ms][DEBUG] SU: done in 1687 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.089/197.089/197.089/0.000 ms\n [2025-09-08 14:36:06][351044512042568][2223 ms][DEBUG] check_internet: online [2025-09-08 14:36:06][351044512042568][2223 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:36:06][351044512042568][2223 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044512042568\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4034\"}'\'' -e'"" [2025-09-08 14:36:06][351044512042568][2223 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:36:06][351044512042568][2223 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044512042568\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4034\"}'\'' -e'"" [2025-09-08 14:36:10][351044512042568][6815 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93b000b2-70c1-4afc-9584-86a8a24ad524","id":"QR_93b000b2-70c1-4afc-9584-86a8a24ad524","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:36:10][351044512042568][6971 ms][DEBUG] proc_open done in 4748 ms; code=255; res.len=3343 [2025-09-08 14:36:10][351044512042568][6971 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-09-08 14:36:10][351044512042568][6971 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:36:13][351044512042568][0 ms][INFO] === Request start === [2025-09-08 14:36:13][351044512042568][0 ms][DEBUG] START check_scloud [2025-09-08 14:36:13][351044512042568][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:36:13][351044512042568][288 ms][DEBUG] SU: done in 288 ms; outu0_a118 29232 15610 24141184 180492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:36:13][351044512042568][288 ms][DEBUG] targetPkg: running [2025-09-08 14:36:13][351044512042568][288 ms][DEBUG] END check_scloud in 288 ms [2025-09-08 14:36:13][351044512042568][288 ms][DEBUG] START check_boot_completed [2025-09-08 14:36:13][351044512042568][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:36:13][351044512042568][335 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:36:13][351044512042568][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:36:13][351044512042568][397 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:36:13][351044512042568][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:36:13][351044512042568][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:36:13][351044512042568][522 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1313\nsuccessfulTxPacketsPerSecond: 2.043549588644052\nretriedTxPackets: 242\nretriedTxPacketsPerSecond: 0.378585879967922\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1302\nsuccessfulRxPacketsPerSecond: 1.8766461361850755\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:36:13][351044512042568][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:36:14][351044512042568][881 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.251/257.251/257.251/0.000 ms\n [2025-09-08 14:36:14][351044512042568][881 ms][DEBUG] check_internet: online [2025-09-08 14:36:14][351044512042568][881 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:36:14][351044512042568][881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044512042568\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9320\"}'\'' -e'"" [2025-09-08 14:36:14][351044512042568][881 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:36:14][351044512042568][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044512042568\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9320\"}'\'' -e'"" [2025-09-08 14:36:19][351044512042568][5942 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2061e841-fd80-4cef-958a-e9ee14aae835","id":"QR_2061e841-fd80-4cef-958a-e9ee14aae835","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:36:19][351044512042568][6099 ms][DEBUG] proc_open done in 5218 ms; code=255; res.len=3343 [2025-09-08 14:36:19][351044512042568][6099 ms][DEBUG] END runCmdUntilRes#1 in 5218 ms [2025-09-08 14:36:19][351044512042568][6099 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:42:03][350299941337721][1 ms][INFO] === Request start === [2025-09-08 14:42:03][350299941337721][1 ms][DEBUG] START check_scloud [2025-09-08 14:42:03][350299941337721][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:42:04][350299941337721][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 29232 15610 24282716 192212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:42:04][350299941337721][293 ms][DEBUG] targetPkg: running [2025-09-08 14:42:04][350299941337721][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-08 14:42:04][350299941337721][293 ms][DEBUG] START check_boot_completed [2025-09-08 14:42:04][350299941337721][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:42:04][350299941337721][325 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 14:42:04][350299941337721][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:42:04][350299941337721][387 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 14:42:04][350299941337721][387 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 14:42:04][350299941337721][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:42:04][350299941337721][528 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1667\nsuccessfulTxPacketsPerSecond: 0.24224565036320256\nretriedTxPackets: 348\nretriedTxPacketsPerSecond: 0.07300553846562269\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1606\nsuccessfulRxPacketsPerSecond: 0.20574288113039121\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:42:04][350299941337721][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:42:05][350299941337721][1840 ms][DEBUG] SU: done in 1312 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.979/189.979/189.979/0.000 ms\n [2025-09-08 14:42:05][350299941337721][1840 ms][DEBUG] check_internet: online [2025-09-08 14:42:05][350299941337721][1840 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:42:05][350299941337721][1840 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299941337721\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4205\"}'\'' -e'"" [2025-09-08 14:42:05][350299941337721][1840 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:42:05][350299941337721][1840 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299941337721\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4205\"}'\'' -e'"" [2025-09-08 14:42:09][350299941337721][5495 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ccf377ca-0d01-4cce-99e0-51e1fb931a06","id":"QR_ccf377ca-0d01-4cce-99e0-51e1fb931a06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:42:09][350299941337721][5651 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-08 14:42:09][350299941337721][5651 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-09-08 14:42:09][350299941337721][5652 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:42:11][350299941337721][0 ms][INFO] === Request start === [2025-09-08 14:42:11][350299941337721][1 ms][DEBUG] START check_scloud [2025-09-08 14:42:11][350299941337721][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:42:12][350299941337721][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 29232 15610 24414052 204068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:42:12][350299941337721][310 ms][DEBUG] targetPkg: running [2025-09-08 14:42:12][350299941337721][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 14:42:12][350299941337721][310 ms][DEBUG] START check_boot_completed [2025-09-08 14:42:12][350299941337721][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:42:12][350299941337721][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 14:42:12][350299941337721][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:42:12][350299941337721][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:42:12][350299941337721][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 14:42:12][350299941337721][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:42:12][350299941337721][513 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1667\nsuccessfulTxPacketsPerSecond: 0.24224565036320256\nretriedTxPackets: 348\nretriedTxPacketsPerSecond: 0.07300553846562269\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1606\nsuccessfulRxPacketsPerSecond: 0.20574288113039121\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:42:12][350299941337721][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:42:12][350299941337721][903 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=282 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 282.259/282.259/282.259/0.000 ms\n [2025-09-08 14:42:12][350299941337721][904 ms][DEBUG] check_internet: online [2025-09-08 14:42:12][350299941337721][904 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:42:12][350299941337721][904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299941337721\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9759\"}'\'' -e'"" [2025-09-08 14:42:12][350299941337721][904 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:42:12][350299941337721][904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299941337721\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9759\"}'\'' -e'"" [2025-09-08 14:42:17][350299941337721][5996 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3d85827-0286-47fb-8c24-7c9314a37f8c","id":"QR_e3d85827-0286-47fb-8c24-7c9314a37f8c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:42:17][350299941337721][6152 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-08 14:42:17][350299941337721][6152 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-08 14:42:17][350299941337721][6152 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:44:03][350726020913543][1 ms][INFO] === Request start === [2025-09-08 14:44:03][350726020913543][1 ms][DEBUG] START check_scloud [2025-09-08 14:44:03][350726020913543][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:44:04][350726020913543][284 ms][DEBUG] SU: done in 282 ms; outu0_a118 29232 15610 24549312 146472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:44:04][350726020913543][284 ms][DEBUG] targetPkg: running [2025-09-08 14:44:04][350726020913543][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-08 14:44:04][350726020913543][284 ms][DEBUG] START check_boot_completed [2025-09-08 14:44:04][350726020913543][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:44:04][350726020913543][330 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:44:04][350726020913543][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:44:04][350726020913543][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:44:04][350726020913543][377 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 14:44:04][350726020913543][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:44:04][350726020913543][502 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1744\nsuccessfulTxPacketsPerSecond: 0.5909757239452619\nretriedTxPackets: 366\nretriedTxPacketsPerSecond: 0.13815016923395732\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1677\nsuccessfulRxPacketsPerSecond: 0.5449256675339428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:44:04][350726020913543][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:44:04][350726020913543][863 ms][DEBUG] SU: done in 361 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=266 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 266.635/266.635/266.635/0.000 ms\n [2025-09-08 14:44:04][350726020913543][863 ms][DEBUG] check_internet: online [2025-09-08 14:44:04][350726020913543][863 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:44:04][350726020913543][863 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350726020913543\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2413\"}'\'' -e'"" [2025-09-08 14:44:04][350726020913543][863 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:44:04][350726020913543][863 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350726020913543\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2413\"}'\'' -e'"" [2025-09-08 14:44:09][350726020913543][6079 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f07a60fe-31bc-4670-981f-1c134b653a26","id":"QR_f07a60fe-31bc-4670-981f-1c134b653a26","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:44:10][350726020913543][6235 ms][DEBUG] proc_open done in 5372 ms; code=255; res.len=3343 [2025-09-08 14:44:10][350726020913543][6235 ms][DEBUG] END runCmdUntilRes#1 in 5372 ms [2025-09-08 14:44:10][350726020913543][6235 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:44:12][350726020913543][0 ms][INFO] === Request start === [2025-09-08 14:44:12][350726020913543][1 ms][DEBUG] START check_scloud [2025-09-08 14:44:12][350726020913543][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:44:12][350726020913543][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 29232 15610 24685768 135604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:44:12][350726020913543][302 ms][DEBUG] targetPkg: running [2025-09-08 14:44:12][350726020913543][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 14:44:12][350726020913543][302 ms][DEBUG] START check_boot_completed [2025-09-08 14:44:12][350726020913543][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:44:12][350726020913543][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:44:12][350726020913543][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:44:12][350726020913543][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:44:12][350726020913543][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 14:44:12][350726020913543][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:44:13][350726020913543][552 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1744\nsuccessfulTxPacketsPerSecond: 0.5909757239452619\nretriedTxPackets: 366\nretriedTxPacketsPerSecond: 0.13815016923395732\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1677\nsuccessfulRxPacketsPerSecond: 0.5449256675339428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:44:13][350726020913543][552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:44:13][350726020913543][911 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.177/254.177/254.177/0.000 ms\n [2025-09-08 14:44:13][350726020913543][911 ms][DEBUG] check_internet: online [2025-09-08 14:44:13][350726020913543][911 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:44:13][350726020913543][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350726020913543\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7369\"}'\'' -e'"" [2025-09-08 14:44:13][350726020913543][911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:44:13][350726020913543][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350726020913543\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7369\"}'\'' -e'"" [2025-09-08 14:44:18][350726020913543][5863 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b51571e7-c72e-4771-af33-bd8e3c1d2668","id":"QR_b51571e7-c72e-4771-af33-bd8e3c1d2668","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:44:18][350726020913543][6019 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-08 14:44:18][350726020913543][6019 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-08 14:44:18][350726020913543][6019 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:45:03][351272338404817][0 ms][INFO] === Request start === [2025-09-08 14:45:03][351272338404817][1 ms][DEBUG] START check_scloud [2025-09-08 14:45:03][351272338404817][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:45:04][351272338404817][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 29232 15610 24789388 152904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:45:04][351272338404817][313 ms][DEBUG] targetPkg: running [2025-09-08 14:45:04][351272338404817][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 14:45:04][351272338404817][313 ms][DEBUG] START check_boot_completed [2025-09-08 14:45:04][351272338404817][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:45:04][351272338404817][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:45:04][351272338404817][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:45:04][351272338404817][422 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 14:45:04][351272338404817][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:45:04][351272338404817][422 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:45:04][351272338404817][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338404817\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2060\"}'\'' -e'"" [2025-09-08 14:45:04][351272338404817][422 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:45:04][351272338404817][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338404817\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2060\"}'\'' -e'"" [2025-09-08 14:45:08][351272338404817][4671 ms][DEBUG] proc_open done in 4248 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 14:45:08][351272338404817][4671 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-08 14:45:08][351272338404817][4671 ms][WARN] Detected error: Process with pid 29232 either refused to load frida-agent, or terminated during injectionProcess with pid 29232 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 14:45:08][351272338404817][4671 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 14:45:08][351272338404817][4937 ms][DEBUG] SU: done in 266 ms; outsystem 15808 15610 12702056 240380 ep_poll 0 S system_server\n [2025-09-08 14:45:08][351272338404817][4937 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 14:45:09][351272338404817][5077 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 14:45:09][351272338404817][5077 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 14:45:09][351272338404817][5078 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 14:45:09][351272338404817][5202 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 14:45:09][351272338404817][5202 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 14:45:09][351272338404817][5437 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 14:45:11][351272338404817][7451 ms][DEBUG] START check_boot_completed [2025-09-08 14:45:11][351272338404817][7452 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:45:11][351272338404817][7499 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:45:11][351272338404817][7499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:45:11][351272338404817][7561 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:45:11][351272338404817][7561 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 14:45:14][351272338404817][10576 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 14:45:14][351272338404817][10576 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338404817\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2060\"}'\'' -e'"" [2025-09-08 14:45:18][351272338404817][14825 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f861eb7-28d3-41f1-bb9e-3160dcf45d17","id":"QR_3f861eb7-28d3-41f1-bb9e-3160dcf45d17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:45:18][351272338404817][14981 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-09-08 14:45:18][351272338404817][14981 ms][DEBUG] END runCmdUntilRes#2 in 4405 ms [2025-09-08 14:45:18][351272338404817][14981 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:45:21][351272338404817][0 ms][INFO] === Request start === [2025-09-08 14:45:21][351272338404817][1 ms][DEBUG] START check_scloud [2025-09-08 14:45:21][351272338404817][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:45:21][351272338404817][246 ms][DEBUG] SU: done in 246 ms; outu0_a118 31343 15610 23625824 123208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:45:21][351272338404817][246 ms][DEBUG] targetPkg: running [2025-09-08 14:45:21][351272338404817][247 ms][DEBUG] END check_scloud in 246 ms [2025-09-08 14:45:21][351272338404817][247 ms][DEBUG] START check_boot_completed [2025-09-08 14:45:21][351272338404817][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:45:21][351272338404817][293 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:45:21][351272338404817][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:45:21][351272338404817][341 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 14:45:21][351272338404817][341 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 14:45:21][351272338404817][341 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:45:21][351272338404817][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338404817\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4869\"}'\'' -e'"" [2025-09-08 14:45:21][351272338404817][341 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:45:21][351272338404817][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338404817\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4869\"}'\'' -e'"" [2025-09-08 14:45:26][351272338404817][5042 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_996b3ad9-2c18-4289-b1cc-ba3b92b49a06","id":"QR_996b3ad9-2c18-4289-b1cc-ba3b92b49a06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:45:26][351272338404817][5198 ms][DEBUG] proc_open done in 4857 ms; code=255; res.len=3343 [2025-09-08 14:45:26][351272338404817][5198 ms][DEBUG] END runCmdUntilRes#1 in 4857 ms [2025-09-08 14:45:26][351272338404817][5198 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:45:30][350482801075223][0 ms][INFO] === Request start === [2025-09-08 14:45:30][350482801075223][1 ms][DEBUG] START check_scloud [2025-09-08 14:45:30][350482801075223][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:45:30][350482801075223][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 31343 15610 23825712 136212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:45:30][350482801075223][294 ms][DEBUG] targetPkg: running [2025-09-08 14:45:30][350482801075223][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-08 14:45:30][350482801075223][294 ms][DEBUG] START check_boot_completed [2025-09-08 14:45:30][350482801075223][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:45:30][350482801075223][340 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:45:30][350482801075223][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:45:31][350482801075223][402 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:45:31][350482801075223][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:45:31][350482801075223][402 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:45:31][350482801075223][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482801075223\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9277\"}'\'' -e'"" [2025-09-08 14:45:31][350482801075223][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:45:31][350482801075223][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482801075223\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9277\"}'\'' -e'"" [2025-09-08 14:45:34][350482801075223][3730 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8019e09-4632-4a9e-9453-3a8517319ef4","id":"QR_b8019e09-4632-4a9e-9453-3a8517319ef4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:45:34][350482801075223][3886 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-08 14:45:34][350482801075223][3886 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-08 14:45:34][350482801075223][3886 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:45:36][350482801075223][0 ms][INFO] === Request start === [2025-09-08 14:45:36][350482801075223][1 ms][DEBUG] START check_scloud [2025-09-08 14:45:36][350482801075223][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:45:37][350482801075223][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 31343 15610 23972436 147920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:45:37][350482801075223][260 ms][DEBUG] targetPkg: running [2025-09-08 14:45:37][350482801075223][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-08 14:45:37][350482801075223][260 ms][DEBUG] START check_boot_completed [2025-09-08 14:45:37][350482801075223][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:45:37][350482801075223][306 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:45:37][350482801075223][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:45:37][350482801075223][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:45:37][350482801075223][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:45:37][350482801075223][353 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:45:37][350482801075223][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482801075223\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8116\"}'\'' -e'"" [2025-09-08 14:45:37][350482801075223][353 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:45:37][350482801075223][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482801075223\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8116\"}'\'' -e'"" [2025-09-08 14:45:41][350482801075223][5008 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2eb51a77-6422-4d1c-a80d-7008eaf20324","id":"QR_2eb51a77-6422-4d1c-a80d-7008eaf20324","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:45:42][350482801075223][5164 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-08 14:45:42][350482801075223][5164 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-08 14:45:42][350482801075223][5165 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:46:03][353530673329859][0 ms][INFO] === Request start === [2025-09-08 14:46:03][353530673329859][1 ms][DEBUG] START check_scloud [2025-09-08 14:46:03][353530673329859][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:46:03][353530673329859][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 31343 15610 24004032 160248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:46:03][353530673329859][307 ms][DEBUG] targetPkg: running [2025-09-08 14:46:03][353530673329859][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 14:46:03][353530673329859][307 ms][DEBUG] START check_boot_completed [2025-09-08 14:46:03][353530673329859][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:46:03][353530673329859][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:46:03][353530673329859][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:46:03][353530673329859][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:46:03][353530673329859][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:46:03][353530673329859][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:46:04][353530673329859][557 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1744\nsuccessfulTxPacketsPerSecond: 0.5909757239452619\nretriedTxPackets: 366\nretriedTxPacketsPerSecond: 0.13815016923395732\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1677\nsuccessfulRxPacketsPerSecond: 0.5449256675339428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:46:04][353530673329859][557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:46:04][353530673329859][916 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.304/220.304/220.304/0.000 ms\n [2025-09-08 14:46:04][353530673329859][917 ms][DEBUG] check_internet: online [2025-09-08 14:46:04][353530673329859][917 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:46:04][353530673329859][917 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530673329859\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4924\"}'\'' -e'"" [2025-09-08 14:46:04][353530673329859][917 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:46:04][353530673329859][917 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530673329859\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4924\"}'\'' -e'"" [2025-09-08 14:46:08][353530673329859][4634 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9527172-f16e-4b06-aad1-7a7b0cbc75a1","id":"QR_e9527172-f16e-4b06-aad1-7a7b0cbc75a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:46:08][353530673329859][4790 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-08 14:46:08][353530673329859][4790 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-09-08 14:46:08][353530673329859][4790 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:46:10][353530673329859][1 ms][INFO] === Request start === [2025-09-08 14:46:10][353530673329859][1 ms][DEBUG] START check_scloud [2025-09-08 14:46:10][353530673329859][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:46:11][353530673329859][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 31343 15610 24160904 170304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:46:11][353530673329859][311 ms][DEBUG] targetPkg: running [2025-09-08 14:46:11][353530673329859][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 14:46:11][353530673329859][311 ms][DEBUG] START check_boot_completed [2025-09-08 14:46:11][353530673329859][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:46:11][353530673329859][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:46:11][353530673329859][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:46:11][353530673329859][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:46:11][353530673329859][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:46:11][353530673329859][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:46:11][353530673329859][498 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1744\nsuccessfulTxPacketsPerSecond: 0.5909757239452619\nretriedTxPackets: 366\nretriedTxPacketsPerSecond: 0.13815016923395732\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1677\nsuccessfulRxPacketsPerSecond: 0.5449256675339428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:46:11][353530673329859][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:46:11][353530673329859][795 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.645/192.645/192.645/0.000 ms\n [2025-09-08 14:46:11][353530673329859][795 ms][DEBUG] check_internet: online [2025-09-08 14:46:11][353530673329859][795 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:46:11][353530673329859][795 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530673329859\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1717\"}'\'' -e'"" [2025-09-08 14:46:11][353530673329859][795 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:46:11][353530673329859][795 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353530673329859\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1717\"}'\'' -e'"" [2025-09-08 14:46:16][353530673329859][5637 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21a914cf-158d-4abe-a02c-6dde4abbfb30","id":"QR_21a914cf-158d-4abe-a02c-6dde4abbfb30","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:46:16][353530673329859][5793 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-08 14:46:16][353530673329859][5793 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-08 14:46:16][353530673329859][5793 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:47:03][350900923208190][1 ms][INFO] === Request start === [2025-09-08 14:47:03][350900923208190][1 ms][DEBUG] START check_scloud [2025-09-08 14:47:03][350900923208190][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:47:03][350900923208190][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 31343 15610 24309448 181956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:47:03][350900923208190][312 ms][DEBUG] targetPkg: running [2025-09-08 14:47:03][350900923208190][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 14:47:03][350900923208190][312 ms][DEBUG] START check_boot_completed [2025-09-08 14:47:03][350900923208190][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:47:03][350900923208190][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 14:47:03][350900923208190][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:47:04][350900923208190][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:47:04][350900923208190][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 14:47:04][350900923208190][390 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:47:04][350900923208190][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900923208190\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4224\"}'\'' -e'"" [2025-09-08 14:47:04][350900923208190][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:47:04][350900923208190][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900923208190\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4224\"}'\'' -e'"" [2025-09-08 14:47:09][350900923208190][5373 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cfc5150c-8a89-4338-930a-fbeb08c12ead","id":"QR_cfc5150c-8a89-4338-930a-fbeb08c12ead","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:47:09][350900923208190][5529 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-08 14:47:09][350900923208190][5529 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-09-08 14:47:09][350900923208190][5529 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:47:11][350900923208190][0 ms][INFO] === Request start === [2025-09-08 14:47:11][350900923208190][1 ms][DEBUG] START check_scloud [2025-09-08 14:47:11][350900923208190][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:47:11][350900923208190][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 31343 15610 24471428 193040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:47:11][350900923208190][327 ms][DEBUG] targetPkg: running [2025-09-08 14:47:11][350900923208190][327 ms][DEBUG] END check_scloud in 327 ms [2025-09-08 14:47:11][350900923208190][327 ms][DEBUG] START check_boot_completed [2025-09-08 14:47:11][350900923208190][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:47:11][350900923208190][374 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:47:11][350900923208190][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:47:11][350900923208190][436 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:47:11][350900923208190][436 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:47:11][350900923208190][436 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:47:11][350900923208190][436 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900923208190\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5574\"}'\'' -e'"" [2025-09-08 14:47:11][350900923208190][436 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:47:11][350900923208190][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900923208190\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5574\"}'\'' -e'"" [2025-09-08 14:47:16][350900923208190][5388 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1588db57-c221-4291-a102-cf0ed11615dd","id":"QR_1588db57-c221-4291-a102-cf0ed11615dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:47:17][350900923208190][5545 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-08 14:47:17][350900923208190][5545 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-08 14:47:17][350900923208190][5545 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:47:21][353173738504131][0 ms][INFO] === Request start === [2025-09-08 14:47:21][353173738504131][1 ms][DEBUG] START check_scloud [2025-09-08 14:47:21][353173738504131][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:47:21][353173738504131][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 31343 15610 24617220 204884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:47:21][353173738504131][308 ms][DEBUG] targetPkg: running [2025-09-08 14:47:21][353173738504131][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 14:47:21][353173738504131][308 ms][DEBUG] START check_boot_completed [2025-09-08 14:47:21][353173738504131][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:47:21][353173738504131][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:47:21][353173738504131][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:47:21][353173738504131][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:47:21][353173738504131][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:47:21][353173738504131][417 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:47:21][353173738504131][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173738504131\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"NEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7851\"}'\'' -e'"" [2025-09-08 14:47:21][353173738504131][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:47:21][353173738504131][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173738504131\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"NEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7851\"}'\'' -e'"" [2025-09-08 14:47:25][353173738504131][3776 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c5733ee-4dca-4168-b44b-851e5eb90db1","id":"QR_1c5733ee-4dca-4168-b44b-851e5eb90db1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:47:25][353173738504131][3932 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=3343 [2025-09-08 14:47:25][353173738504131][3932 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-09-08 14:47:25][353173738504131][3932 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:47:27][353173738504131][0 ms][INFO] === Request start === [2025-09-08 14:47:27][353173738504131][1 ms][DEBUG] START check_scloud [2025-09-08 14:47:27][353173738504131][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:47:27][353173738504131][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 31343 15610 24759784 215884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:47:27][353173738504131][273 ms][DEBUG] targetPkg: running [2025-09-08 14:47:27][353173738504131][273 ms][DEBUG] END check_scloud in 273 ms [2025-09-08 14:47:27][353173738504131][273 ms][DEBUG] START check_boot_completed [2025-09-08 14:47:27][353173738504131][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:47:27][353173738504131][320 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:47:27][353173738504131][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:47:27][353173738504131][367 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:47:27][353173738504131][367 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:47:27][353173738504131][367 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:47:27][353173738504131][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173738504131\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"NEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4723\"}'\'' -e'"" [2025-09-08 14:47:27][353173738504131][367 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:47:27][353173738504131][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173738504131\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"NEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4723\"}'\'' -e'"" [2025-09-08 14:47:32][353173738504131][4631 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67a9494a-a423-4649-a807-10114b352383","id":"QR_67a9494a-a423-4649-a807-10114b352383","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:47:32][353173738504131][4787 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3343 [2025-09-08 14:47:32][353173738504131][4787 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-09-08 14:47:32][353173738504131][4787 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:48:04][358673443301736][1 ms][INFO] === Request start === [2025-09-08 14:48:04][358673443301736][1 ms][DEBUG] START check_scloud [2025-09-08 14:48:04][358673443301736][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:48:04][358673443301736][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 31343 15610 24889860 227976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:48:04][358673443301736][305 ms][DEBUG] targetPkg: running [2025-09-08 14:48:04][358673443301736][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 14:48:04][358673443301736][305 ms][DEBUG] START check_boot_completed [2025-09-08 14:48:04][358673443301736][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:48:04][358673443301736][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:48:04][358673443301736][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:48:04][358673443301736][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:48:04][358673443301736][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:48:04][358673443301736][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:48:04][358673443301736][524 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1744\nsuccessfulTxPacketsPerSecond: 0.5909757239452619\nretriedTxPackets: 366\nretriedTxPacketsPerSecond: 0.13815016923395732\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1677\nsuccessfulRxPacketsPerSecond: 0.5449256675339428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:48:04][358673443301736][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:48:06][358673443301736][2164 ms][DEBUG] SU: done in 1640 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.976/201.976/201.976/0.000 ms\n [2025-09-08 14:48:06][358673443301736][2164 ms][DEBUG] check_internet: online [2025-09-08 14:48:06][358673443301736][2164 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:48:06][358673443301736][2164 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673443301736\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5959\"}'\'' -e'"" [2025-09-08 14:48:06][358673443301736][2164 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:48:06][358673443301736][2164 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673443301736\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5959\"}'\'' -e'"" [2025-09-08 14:48:10][358673443301736][6288 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57f2e9dc-3283-4d0f-80f1-de7a82c0b780","id":"QR_57f2e9dc-3283-4d0f-80f1-de7a82c0b780","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:48:10][358673443301736][6444 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-09-08 14:48:10][358673443301736][6444 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-09-08 14:48:10][358673443301736][6444 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:48:13][358673443301736][0 ms][INFO] === Request start === [2025-09-08 14:48:13][358673443301736][1 ms][DEBUG] START check_scloud [2025-09-08 14:48:13][358673443301736][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:48:13][358673443301736][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 31343 15610 25022092 238804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:48:13][358673443301736][303 ms][DEBUG] targetPkg: running [2025-09-08 14:48:13][358673443301736][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 14:48:13][358673443301736][303 ms][DEBUG] START check_boot_completed [2025-09-08 14:48:13][358673443301736][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:48:13][358673443301736][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:48:13][358673443301736][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:48:13][358673443301736][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:48:13][358673443301736][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:48:13][358673443301736][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:48:13][358673443301736][489 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1744\nsuccessfulTxPacketsPerSecond: 0.5909757239452619\nretriedTxPackets: 366\nretriedTxPacketsPerSecond: 0.13815016923395732\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1677\nsuccessfulRxPacketsPerSecond: 0.5449256675339428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:48:13][358673443301736][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:48:13][358673443301736][849 ms][DEBUG] SU: done in 360 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.204/258.204/258.204/0.000 ms\n [2025-09-08 14:48:13][358673443301736][849 ms][DEBUG] check_internet: online [2025-09-08 14:48:13][358673443301736][849 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:48:13][358673443301736][849 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673443301736\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3967\"}'\'' -e'"" [2025-09-08 14:48:13][358673443301736][849 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:48:13][358673443301736][850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673443301736\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3967\"}'\'' -e'"" [2025-09-08 14:48:17][358673443301736][4832 ms][DEBUG] proc_open done in 3983 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 14:48:17][358673443301736][4832 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-08 14:48:17][358673443301736][4832 ms][WARN] Detected error: Process with pid 31343 either refused to load frida-agent, or terminated during injectionProcess with pid 31343 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 14:48:17][358673443301736][4832 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 14:48:18][358673443301736][5113 ms][DEBUG] SU: done in 281 ms; outsystem 15808 15610 12702056 218876 ep_poll 0 S system_server\n [2025-09-08 14:48:18][358673443301736][5114 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 14:48:18][358673443301736][5270 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 14:48:18][358673443301736][5270 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 14:48:18][358673443301736][5270 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 14:48:18][358673443301736][5410 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 14:48:18][358673443301736][5411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 14:48:18][358673443301736][5582 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 14:48:20][358673443301736][7597 ms][DEBUG] START check_boot_completed [2025-09-08 14:48:20][358673443301736][7597 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:48:20][358673443301736][7644 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:48:20][358673443301736][7644 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:48:20][358673443301736][7691 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:48:20][358673443301736][7691 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 14:48:23][358673443301736][10706 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 14:48:23][358673443301736][10706 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673443301736\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3967\"}'\'' -e'"" [2025-09-08 14:48:28][358673443301736][15564 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe2a7ecb-6c25-447e-8d73-9d28fd6f6608","id":"QR_fe2a7ecb-6c25-447e-8d73-9d28fd6f6608","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:48:28][358673443301736][15720 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-08 14:48:28][358673443301736][15720 ms][DEBUG] END runCmdUntilRes#2 in 5015 ms [2025-09-08 14:48:28][358673443301736][15720 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:49:03][358104901883908][0 ms][INFO] === Request start === [2025-09-08 14:49:03][358104901883908][1 ms][DEBUG] START check_scloud [2025-09-08 14:49:03][358104901883908][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:49:03][358104901883908][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 32633 15610 23515672 126964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:49:03][358104901883908][325 ms][DEBUG] targetPkg: running [2025-09-08 14:49:03][358104901883908][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 14:49:03][358104901883908][325 ms][DEBUG] START check_boot_completed [2025-09-08 14:49:03][358104901883908][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:49:03][358104901883908][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:49:03][358104901883908][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:49:03][358104901883908][434 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 14:49:03][358104901883908][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:49:03][358104901883908][434 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:49:03][358104901883908][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104901883908\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9503\"}'\'' -e'"" [2025-09-08 14:49:03][358104901883908][434 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:49:03][358104901883908][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104901883908\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9503\"}'\'' -e'"" [2025-09-08 14:49:07][358104901883908][3855 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_83a0c188-cebc-4eb3-8078-09d736f50d32","id":"QR_83a0c188-cebc-4eb3-8078-09d736f50d32","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:49:07][358104901883908][4011 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-09-08 14:49:07][358104901883908][4011 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-08 14:49:07][358104901883908][4011 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:49:09][358104901883908][0 ms][INFO] === Request start === [2025-09-08 14:49:09][358104901883908][1 ms][DEBUG] START check_scloud [2025-09-08 14:49:09][358104901883908][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:49:09][358104901883908][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 32633 15610 23688864 137736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:49:09][358104901883908][314 ms][DEBUG] targetPkg: running [2025-09-08 14:49:09][358104901883908][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 14:49:09][358104901883908][314 ms][DEBUG] START check_boot_completed [2025-09-08 14:49:09][358104901883908][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:49:09][358104901883908][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:49:09][358104901883908][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:49:10][358104901883908][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:49:10][358104901883908][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:49:10][358104901883908][408 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:49:10][358104901883908][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104901883908\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1831\"}'\'' -e'"" [2025-09-08 14:49:10][358104901883908][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:49:10][358104901883908][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104901883908\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1831\"}'\'' -e'"" [2025-09-08 14:49:14][358104901883908][5157 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff92ff30-0cbd-4a74-81bc-1a8b9f296abb","id":"QR_ff92ff30-0cbd-4a74-81bc-1a8b9f296abb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:49:14][358104901883908][5313 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-08 14:49:14][358104901883908][5313 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-08 14:49:14][358104901883908][5313 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:51:03][350299947975474][1 ms][INFO] === Request start === [2025-09-08 14:51:03][350299947975474][1 ms][DEBUG] START check_scloud [2025-09-08 14:51:03][350299947975474][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:51:03][350299947975474][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 32633 15610 23819732 149540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:51:03][350299947975474][316 ms][DEBUG] targetPkg: running [2025-09-08 14:51:03][350299947975474][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 14:51:03][350299947975474][316 ms][DEBUG] START check_boot_completed [2025-09-08 14:51:03][350299947975474][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:51:04][350299947975474][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:51:04][350299947975474][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:51:04][350299947975474][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:51:04][350299947975474][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:51:04][350299947975474][410 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:51:04][350299947975474][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299947975474\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1183\"}'\'' -e'"" [2025-09-08 14:51:04][350299947975474][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:51:04][350299947975474][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299947975474\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1183\"}'\'' -e'"" [2025-09-08 14:51:08][350299947975474][5065 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0459db2c-e422-46f7-a05c-2081d596db13","id":"QR_0459db2c-e422-46f7-a05c-2081d596db13","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:51:08][350299947975474][5221 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-08 14:51:08][350299947975474][5221 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-08 14:51:08][350299947975474][5221 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:51:11][350299947975474][1 ms][INFO] === Request start === [2025-09-08 14:51:11][350299947975474][1 ms][DEBUG] START check_scloud [2025-09-08 14:51:11][350299947975474][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:51:11][350299947975474][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 32633 15610 24001244 160368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:51:11][350299947975474][259 ms][DEBUG] targetPkg: running [2025-09-08 14:51:11][350299947975474][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-08 14:51:11][350299947975474][259 ms][DEBUG] START check_boot_completed [2025-09-08 14:51:11][350299947975474][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:51:11][350299947975474][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:51:11][350299947975474][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:51:11][350299947975474][384 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 14:51:11][350299947975474][384 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 14:51:11][350299947975474][384 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:51:11][350299947975474][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299947975474\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5136\"}'\'' -e'"" [2025-09-08 14:51:11][350299947975474][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:51:11][350299947975474][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299947975474\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5136\"}'\'' -e'"" [2025-09-08 14:51:16][350299947975474][5336 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f7479e9-e5d2-4346-baf9-e5e1ff65e51a","id":"QR_7f7479e9-e5d2-4346-baf9-e5e1ff65e51a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:51:16][350299947975474][5492 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-08 14:51:16][350299947975474][5492 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-08 14:51:16][350299947975474][5492 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:52:04][357980442223261][0 ms][INFO] === Request start === [2025-09-08 14:52:04][357980442223261][1 ms][DEBUG] START check_scloud [2025-09-08 14:52:04][357980442223261][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:52:04][357980442223261][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 32633 15610 24131420 172428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:52:04][357980442223261][298 ms][DEBUG] targetPkg: running [2025-09-08 14:52:04][357980442223261][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-08 14:52:04][357980442223261][298 ms][DEBUG] START check_boot_completed [2025-09-08 14:52:04][357980442223261][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:52:04][357980442223261][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:52:04][357980442223261][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:52:04][357980442223261][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 14:52:04][357980442223261][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 14:52:04][357980442223261][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:52:04][357980442223261][516 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2158\nsuccessfulTxPacketsPerSecond: 1.374634343944138\nretriedTxPackets: 482\nretriedTxPacketsPerSecond: 0.3851632461292754\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2020\nsuccessfulRxPacketsPerSecond: 1.1388878743305297\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:52:04][357980442223261][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:52:05][357980442223261][906 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=282 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 282.926/282.926/282.926/0.000 ms\n [2025-09-08 14:52:05][357980442223261][906 ms][DEBUG] check_internet: online [2025-09-08 14:52:05][357980442223261][906 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:52:05][357980442223261][906 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980442223261\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2050\"}'\'' -e'"" [2025-09-08 14:52:05][357980442223261][906 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:52:05][357980442223261][906 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980442223261\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2050\"}'\'' -e'"" [2025-09-08 14:52:09][357980442223261][5655 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d3c1fe3-70b6-4c3d-8998-9b876d4dec6f","id":"QR_5d3c1fe3-70b6-4c3d-8998-9b876d4dec6f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:52:10][357980442223261][5811 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-08 14:52:10][357980442223261][5811 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-08 14:52:10][357980442223261][5811 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:52:13][357980442223261][0 ms][INFO] === Request start === [2025-09-08 14:52:13][357980442223261][1 ms][DEBUG] START check_scloud [2025-09-08 14:52:13][357980442223261][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:52:14][357980442223261][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 32633 15610 24257636 183308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:52:14][357980442223261][287 ms][DEBUG] targetPkg: running [2025-09-08 14:52:14][357980442223261][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-08 14:52:14][357980442223261][287 ms][DEBUG] START check_boot_completed [2025-09-08 14:52:14][357980442223261][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:52:14][357980442223261][333 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 14:52:14][357980442223261][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:52:14][357980442223261][411 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 14:52:14][357980442223261][411 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-08 14:52:14][357980442223261][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:52:14][357980442223261][567 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2158\nsuccessfulTxPacketsPerSecond: 1.374634343944138\nretriedTxPackets: 482\nretriedTxPacketsPerSecond: 0.3851632461292754\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2020\nsuccessfulRxPacketsPerSecond: 1.1388878743305297\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:52:14][357980442223261][567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:52:14][357980442223261][942 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.555/261.555/261.555/0.000 ms\n [2025-09-08 14:52:14][357980442223261][942 ms][DEBUG] check_internet: online [2025-09-08 14:52:14][357980442223261][942 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:52:14][357980442223261][942 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980442223261\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8899\"}'\'' -e'"" [2025-09-08 14:52:14][357980442223261][942 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:52:14][357980442223261][942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980442223261\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8899\"}'\'' -e'"" [2025-09-08 14:52:19][357980442223261][5206 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b17bfff2-dddb-4388-b4d5-d908e99aea99","id":"QR_b17bfff2-dddb-4388-b4d5-d908e99aea99","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:52:19][357980442223261][5363 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-09-08 14:52:19][357980442223261][5363 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-09-08 14:52:19][357980442223261][5363 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:54:03][353204667769567][1 ms][INFO] === Request start === [2025-09-08 14:54:03][353204667769567][1 ms][DEBUG] START check_scloud [2025-09-08 14:54:03][353204667769567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:54:04][353204667769567][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 32633 15610 24400164 195372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:54:04][353204667769567][306 ms][DEBUG] targetPkg: running [2025-09-08 14:54:04][353204667769567][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 14:54:04][353204667769567][306 ms][DEBUG] START check_boot_completed [2025-09-08 14:54:04][353204667769567][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:54:04][353204667769567][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 14:54:04][353204667769567][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:54:04][353204667769567][400 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 14:54:04][353204667769567][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 14:54:04][353204667769567][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:54:04][353204667769567][541 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2376\nsuccessfulTxPacketsPerSecond: 0.2800103585799575\nretriedTxPackets: 536\nretriedTxPacketsPerSecond: 0.17928732765591496\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2216\nsuccessfulRxPacketsPerSecond: 0.2782311901411701\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:54:04][353204667769567][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:54:05][353204667769567][2259 ms][DEBUG] SU: done in 1718 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.423/198.423/198.423/0.000 ms\n [2025-09-08 14:54:05][353204667769567][2259 ms][DEBUG] check_internet: online [2025-09-08 14:54:05][353204667769567][2259 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:54:05][353204667769567][2259 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204667769567\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8699\"}'\'' -e'"" [2025-09-08 14:54:05][353204667769567][2259 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:54:05][353204667769567][2259 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204667769567\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8699\"}'\'' -e'"" [2025-09-08 14:54:09][353204667769567][6211 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b475c3c0-a3f1-4058-8fef-180d12b457f6","id":"QR_b475c3c0-a3f1-4058-8fef-180d12b457f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:54:10][353204667769567][6367 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-09-08 14:54:10][353204667769567][6367 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-08 14:54:10][353204667769567][6367 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:54:12][353204667769567][0 ms][INFO] === Request start === [2025-09-08 14:54:12][353204667769567][1 ms][DEBUG] START check_scloud [2025-09-08 14:54:12][353204667769567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:54:12][353204667769567][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 32633 15610 24542636 206228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:54:12][353204667769567][268 ms][DEBUG] targetPkg: running [2025-09-08 14:54:12][353204667769567][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-08 14:54:12][353204667769567][269 ms][DEBUG] START check_boot_completed [2025-09-08 14:54:12][353204667769567][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:54:12][353204667769567][315 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 14:54:12][353204667769567][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:54:12][353204667769567][378 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 14:54:12][353204667769567][378 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 14:54:12][353204667769567][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:54:12][353204667769567][487 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2376\nsuccessfulTxPacketsPerSecond: 0.2800103585799575\nretriedTxPackets: 536\nretriedTxPacketsPerSecond: 0.17928732765591496\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2216\nsuccessfulRxPacketsPerSecond: 0.2782311901411701\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:54:12][353204667769567][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:54:13][353204667769567][784 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.863/163.863/163.863/0.000 ms\n [2025-09-08 14:54:13][353204667769567][784 ms][DEBUG] check_internet: online [2025-09-08 14:54:13][353204667769567][784 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:54:13][353204667769567][784 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204667769567\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2128\"}'\'' -e'"" [2025-09-08 14:54:13][353204667769567][784 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:54:13][353204667769567][784 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204667769567\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2128\"}'\'' -e'"" [2025-09-08 14:54:18][353204667769567][5782 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_778952c8-1f38-4ab6-be6f-5c548ed446f5","id":"QR_778952c8-1f38-4ab6-be6f-5c548ed446f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:54:18][353204667769567][5939 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-09-08 14:54:18][353204667769567][5939 ms][DEBUG] END runCmdUntilRes#1 in 5154 ms [2025-09-08 14:54:18][353204667769567][5939 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:56:04][351123901015193][1 ms][INFO] === Request start === [2025-09-08 14:56:04][351123901015193][1 ms][DEBUG] START check_scloud [2025-09-08 14:56:04][351123901015193][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:56:04][351123901015193][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 32633 15610 24629868 217944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:56:04][351123901015193][303 ms][DEBUG] targetPkg: running [2025-09-08 14:56:04][351123901015193][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 14:56:04][351123901015193][303 ms][DEBUG] START check_boot_completed [2025-09-08 14:56:04][351123901015193][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:56:04][351123901015193][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:56:04][351123901015193][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:56:05][351123901015193][428 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 14:56:05][351123901015193][428 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 14:56:05][351123901015193][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:56:05][351123901015193][553 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2376\nsuccessfulTxPacketsPerSecond: 0.2800103585799575\nretriedTxPackets: 536\nretriedTxPacketsPerSecond: 0.17928732765591496\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2216\nsuccessfulRxPacketsPerSecond: 0.2782311901411701\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:56:05][351123901015193][553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:56:05][351123901015193][959 ms][DEBUG] SU: done in 406 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=271 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 271.586/271.586/271.586/0.000 ms\n [2025-09-08 14:56:05][351123901015193][959 ms][DEBUG] check_internet: online [2025-09-08 14:56:05][351123901015193][959 ms][DEBUG] rawBody.length=1160 [2025-09-08 14:56:05][351123901015193][959 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123901015193\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8995\"}'\'' -e'"" [2025-09-08 14:56:05][351123901015193][959 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:56:05][351123901015193][959 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123901015193\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8995\"}'\'' -e'"" [2025-09-08 14:56:11][351123901015193][7129 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_919b4809-a251-444a-b4d4-60f732794c40","id":"QR_919b4809-a251-444a-b4d4-60f732794c40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:56:11][351123901015193][7285 ms][DEBUG] proc_open done in 6326 ms; code=255; res.len=3343 [2025-09-08 14:56:11][351123901015193][7286 ms][DEBUG] END runCmdUntilRes#1 in 6327 ms [2025-09-08 14:56:11][351123901015193][7286 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 14:56:15][351123901015193][0 ms][INFO] === Request start === [2025-09-08 14:56:15][351123901015193][1 ms][DEBUG] START check_scloud [2025-09-08 14:56:15][351123901015193][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 14:56:15][351123901015193][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 32633 15610 24778484 229724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 14:56:15][351123901015193][293 ms][DEBUG] targetPkg: running [2025-09-08 14:56:15][351123901015193][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-08 14:56:15][351123901015193][293 ms][DEBUG] START check_boot_completed [2025-09-08 14:56:15][351123901015193][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 14:56:15][351123901015193][340 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 14:56:15][351123901015193][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 14:56:15][351123901015193][433 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 14:56:15][351123901015193][433 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 14:56:15][351123901015193][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 14:56:15][351123901015193][589 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2376\nsuccessfulTxPacketsPerSecond: 0.2800103585799575\nretriedTxPackets: 536\nretriedTxPacketsPerSecond: 0.17928732765591496\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2216\nsuccessfulRxPacketsPerSecond: 0.2782311901411701\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 14:56:15][351123901015193][590 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 14:56:16][351123901015193][933 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.752/222.752/222.752/0.000 ms\n [2025-09-08 14:56:16][351123901015193][933 ms][DEBUG] check_internet: online [2025-09-08 14:56:16][351123901015193][933 ms][DEBUG] rawBody.length=1150 [2025-09-08 14:56:16][351123901015193][933 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123901015193\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6550\"}'\'' -e'"" [2025-09-08 14:56:16][351123901015193][934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 14:56:16][351123901015193][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123901015193\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6550\"}'\'' -e'"" [2025-09-08 14:56:20][351123901015193][4807 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_185e2464-f910-437f-87a2-c25bb8d35bf1","id":"QR_185e2464-f910-437f-87a2-c25bb8d35bf1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 14:56:20][351123901015193][4963 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-09-08 14:56:20][351123901015193][4963 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-08 14:56:20][351123901015193][4963 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:00:03][355041115328705][1 ms][INFO] === Request start === [2025-09-08 15:00:03][355041115328705][1 ms][DEBUG] START check_scloud [2025-09-08 15:00:03][355041115328705][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:00:03][355041115328705][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 32633 15610 24877812 241088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:00:03][355041115328705][311 ms][DEBUG] targetPkg: running [2025-09-08 15:00:03][355041115328705][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 15:00:03][355041115328705][311 ms][DEBUG] START check_boot_completed [2025-09-08 15:00:03][355041115328705][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:00:03][355041115328705][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:00:03][355041115328705][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:00:03][355041115328705][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:00:03][355041115328705][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:00:03][355041115328705][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:00:03][355041115328705][499 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2546\nsuccessfulTxPacketsPerSecond: 0.1182394017292042\nretriedTxPackets: 575\nretriedTxPacketsPerSecond: 2.837836925744415E-5\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2361\nsuccessfulRxPacketsPerSecond: 0.1182212104668597\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:00:03][355041115328705][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:00:05][355041115328705][2030 ms][DEBUG] SU: done in 1531 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.261/198.261/198.261/0.000 ms\n [2025-09-08 15:00:05][355041115328705][2030 ms][DEBUG] check_internet: online [2025-09-08 15:00:05][355041115328705][2030 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:00:05][355041115328705][2030 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355041115328705\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1017\"}'\'' -e'"" [2025-09-08 15:00:05][355041115328705][2030 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:00:05][355041115328705][2030 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355041115328705\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1017\"}'\'' -e'"" [2025-09-08 15:00:09][355041115328705][5717 ms][DEBUG] proc_open done in 3687 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 15:00:09][355041115328705][5717 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-09-08 15:00:09][355041115328705][5717 ms][WARN] Detected error: Process with pid 32633 either refused to load frida-agent, or terminated during injectionProcess with pid 32633 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 15:00:09][355041115328705][5717 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 15:00:09][355041115328705][5998 ms][DEBUG] SU: done in 281 ms; outsystem 15808 15610 12611144 177724 ep_poll 0 S system_server\n [2025-09-08 15:00:09][355041115328705][5998 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 15:00:09][355041115328705][6154 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 15:00:09][355041115328705][6154 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 15:00:09][355041115328705][6154 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 15:00:09][355041115328705][6263 ms][DEBUG] SU: done in 110 ms; out [2025-09-08 15:00:09][355041115328705][6264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 15:00:09][355041115328705][6404 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 15:00:11][355041115328705][8419 ms][DEBUG] START check_boot_completed [2025-09-08 15:00:11][355041115328705][8419 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:00:11][355041115328705][8466 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:00:11][355041115328705][8466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:00:11][355041115328705][8513 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:00:11][355041115328705][8513 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 15:00:14][355041115328705][11527 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 15:00:14][355041115328705][11528 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355041115328705\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1017\"}'\'' -e'"" [2025-09-08 15:00:18][355041115328705][14995 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4218ac78-e9ab-493a-9bad-dda1efa946d1","id":"QR_4218ac78-e9ab-493a-9bad-dda1efa946d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:00:18][355041115328705][15152 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=3343 [2025-09-08 15:00:18][355041115328705][15152 ms][DEBUG] END runCmdUntilRes#2 in 3624 ms [2025-09-08 15:00:18][355041115328705][15152 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:00:20][354068193371241][0 ms][INFO] === Request start === [2025-09-08 15:00:20][354068193371241][1 ms][DEBUG] START check_scloud [2025-09-08 15:00:20][354068193371241][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:00:20][354068193371241][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 1775 15610 23645984 124084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:00:20][354068193371241][248 ms][DEBUG] targetPkg: running [2025-09-08 15:00:20][354068193371241][248 ms][DEBUG] END check_scloud in 248 ms [2025-09-08 15:00:20][354068193371241][248 ms][DEBUG] START check_boot_completed [2025-09-08 15:00:20][354068193371241][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:00:21][354068193371241][295 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:00:21][354068193371241][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:00:21][354068193371241][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:00:21][354068193371241][342 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:00:21][354068193371241][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:00:21][354068193371241][451 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2546\nsuccessfulTxPacketsPerSecond: 0.1182394017292042\nretriedTxPackets: 575\nretriedTxPacketsPerSecond: 2.837836925744415E-5\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2361\nsuccessfulRxPacketsPerSecond: 0.1182212104668597\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:00:21][354068193371241][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:00:21][354068193371241][810 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.468/248.468/248.468/0.000 ms\n [2025-09-08 15:00:21][354068193371241][811 ms][DEBUG] check_internet: online [2025-09-08 15:00:21][354068193371241][811 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:00:21][354068193371241][811 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193371241\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5176\"}'\'' -e'"" [2025-09-08 15:00:21][354068193371241][811 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:00:21][354068193371241][811 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193371241\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5176\"}'\'' -e'"" [2025-09-08 15:00:25][354068193371241][4762 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5526417f-7de3-4371-adab-a8b54c23e638","id":"QR_5526417f-7de3-4371-adab-a8b54c23e638","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:00:25][354068193371241][4919 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-09-08 15:00:25][354068193371241][4919 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-08 15:00:25][354068193371241][4919 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:00:28][350915064642619][0 ms][INFO] === Request start === [2025-09-08 15:00:28][350915064642619][1 ms][DEBUG] START check_scloud [2025-09-08 15:00:28][350915064642619][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:00:29][350915064642619][254 ms][DEBUG] SU: done in 254 ms; outu0_a118 1775 15610 23822452 137364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:00:29][350915064642619][255 ms][DEBUG] targetPkg: running [2025-09-08 15:00:29][350915064642619][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-08 15:00:29][350915064642619][255 ms][DEBUG] START check_boot_completed [2025-09-08 15:00:29][350915064642619][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:00:29][350915064642619][301 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:00:29][350915064642619][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:00:29][350915064642619][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:00:29][350915064642619][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:00:29][350915064642619][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:00:29][350915064642619][442 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2546\nsuccessfulTxPacketsPerSecond: 0.1182394017292042\nretriedTxPackets: 575\nretriedTxPacketsPerSecond: 2.837836925744415E-5\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2361\nsuccessfulRxPacketsPerSecond: 0.1182212104668597\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:00:29][350915064642619][442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:00:29][350915064642619][723 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.991/186.991/186.991/0.000 ms\n [2025-09-08 15:00:29][350915064642619][723 ms][DEBUG] check_internet: online [2025-09-08 15:00:29][350915064642619][723 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:00:29][350915064642619][724 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915064642619\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2848\"}'\'' -e'"" [2025-09-08 15:00:29][350915064642619][724 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:00:29][350915064642619][724 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915064642619\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2848\"}'\'' -e'"" [2025-09-08 15:00:34][350915064642619][5362 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_064fceea-f0e3-4911-a1a2-a2f7292ee738","id":"QR_064fceea-f0e3-4911-a1a2-a2f7292ee738","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:00:34][350915064642619][5519 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 15:00:34][350915064642619][5519 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 15:00:34][350915064642619][5519 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:01:04][355835401480694][0 ms][INFO] === Request start === [2025-09-08 15:01:04][355835401480694][1 ms][DEBUG] START check_scloud [2025-09-08 15:01:04][355835401480694][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:01:04][355835401480694][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 1775 15610 23849888 149660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:01:04][355835401480694][285 ms][DEBUG] targetPkg: running [2025-09-08 15:01:04][355835401480694][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-08 15:01:04][355835401480694][285 ms][DEBUG] START check_boot_completed [2025-09-08 15:01:04][355835401480694][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:01:04][355835401480694][330 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:01:04][355835401480694][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:01:04][355835401480694][393 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 15:01:04][355835401480694][393 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 15:01:04][355835401480694][393 ms][DEBUG] rawBody.length=1159 [2025-09-08 15:01:04][355835401480694][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355835401480694\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7881\"}'\'' -e'"" [2025-09-08 15:01:04][355835401480694][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:01:04][355835401480694][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355835401480694\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7881\"}'\'' -e'"" [2025-09-08 15:01:09][355835401480694][4923 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58f6c7b5-9af6-44e1-8fb5-3329db617c2b","id":"QR_58f6c7b5-9af6-44e1-8fb5-3329db617c2b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:01:09][355835401480694][5079 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-08 15:01:09][355835401480694][5080 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-08 15:01:09][355835401480694][5080 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:01:13][355835401480694][0 ms][INFO] === Request start === [2025-09-08 15:01:13][355835401480694][1 ms][DEBUG] START check_scloud [2025-09-08 15:01:13][355835401480694][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:01:13][355835401480694][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 1775 15610 24007968 160092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:01:13][355835401480694][319 ms][DEBUG] targetPkg: running [2025-09-08 15:01:13][355835401480694][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 15:01:13][355835401480694][319 ms][DEBUG] START check_boot_completed [2025-09-08 15:01:13][355835401480694][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:01:13][355835401480694][366 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:01:13][355835401480694][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:01:13][355835401480694][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:01:13][355835401480694][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:01:13][355835401480694][413 ms][DEBUG] rawBody.length=1149 [2025-09-08 15:01:13][355835401480694][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355835401480694\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6001\"}'\'' -e'"" [2025-09-08 15:01:13][355835401480694][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:01:13][355835401480694][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355835401480694\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6001\"}'\'' -e'"" [2025-09-08 15:01:16][355835401480694][3818 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a801d345-fe30-4014-924b-d79ae521c3cc","id":"QR_a801d345-fe30-4014-924b-d79ae521c3cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:01:17][355835401480694][3974 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-08 15:01:17][355835401480694][3974 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-09-08 15:01:17][355835401480694][3974 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:03:41][352600228035854][1 ms][INFO] === Request start === [2025-09-08 15:03:41][352600228035854][1 ms][DEBUG] START check_scloud [2025-09-08 15:03:41][352600228035854][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:03:41][352600228035854][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 1775 15610 24140016 167104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:03:41][352600228035854][284 ms][DEBUG] targetPkg: running [2025-09-08 15:03:41][352600228035854][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-08 15:03:41][352600228035854][284 ms][DEBUG] START check_boot_completed [2025-09-08 15:03:41][352600228035854][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:03:41][352600228035854][315 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:03:41][352600228035854][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:03:41][352600228035854][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:03:41][352600228035854][362 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:03:41][352600228035854][362 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:03:41][352600228035854][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228035854\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5510\"}'\'' -e'"" [2025-09-08 15:03:41][352600228035854][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:03:41][352600228035854][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228035854\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5510\"}'\'' -e'"" [2025-09-08 15:03:45][352600228035854][4533 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_850f1a7f-6ed3-4a77-a756-9250772a4429","id":"QR_850f1a7f-6ed3-4a77-a756-9250772a4429","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:03:46][352600228035854][4689 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-09-08 15:03:46][352600228035854][4689 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-09-08 15:03:46][352600228035854][4689 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:03:48][352600228035854][0 ms][INFO] === Request start === [2025-09-08 15:03:48][352600228035854][1 ms][DEBUG] START check_scloud [2025-09-08 15:03:48][352600228035854][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:03:48][352600228035854][288 ms][DEBUG] SU: done in 288 ms; outu0_a118 1775 15610 24319480 154804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:03:48][352600228035854][288 ms][DEBUG] targetPkg: running [2025-09-08 15:03:48][352600228035854][288 ms][DEBUG] END check_scloud in 288 ms [2025-09-08 15:03:48][352600228035854][288 ms][DEBUG] START check_boot_completed [2025-09-08 15:03:48][352600228035854][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:03:48][352600228035854][320 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:03:48][352600228035854][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:03:48][352600228035854][382 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 15:03:48][352600228035854][382 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 15:03:48][352600228035854][382 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:03:48][352600228035854][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228035854\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6563\"}'\'' -e'"" [2025-09-08 15:03:48][352600228035854][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:03:48][352600228035854][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228035854\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6563\"}'\'' -e'"" [2025-09-08 15:03:53][352600228035854][4834 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea1cac42-4ff1-4043-b259-81f08f751d22","id":"QR_ea1cac42-4ff1-4043-b259-81f08f751d22","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:03:53][352600228035854][4990 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-08 15:03:53][352600228035854][4990 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-08 15:03:53][352600228035854][4991 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:05:05][352822350432085][0 ms][INFO] === Request start === [2025-09-08 15:05:05][352822350432085][1 ms][DEBUG] START check_scloud [2025-09-08 15:05:05][352822350432085][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:05:05][352822350432085][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 1775 15610 24406712 159012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:05:05][352822350432085][309 ms][DEBUG] targetPkg: running [2025-09-08 15:05:05][352822350432085][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 15:05:05][352822350432085][309 ms][DEBUG] START check_boot_completed [2025-09-08 15:05:05][352822350432085][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:05:05][352822350432085][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:05:05][352822350432085][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:05:05][352822350432085][434 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 15:05:05][352822350432085][434 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 15:05:05][352822350432085][434 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:05:05][352822350432085][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352822350432085\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9729\"}'\'' -e'"" [2025-09-08 15:05:05][352822350432085][434 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:05:05][352822350432085][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352822350432085\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9729\"}'\'' -e'"" [2025-09-08 15:05:11][352822350432085][6494 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_49988285-4b86-4f84-8ae7-bbbd6ec63686","id":"QR_49988285-4b86-4f84-8ae7-bbbd6ec63686","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:05:11][352822350432085][6651 ms][DEBUG] proc_open done in 6216 ms; code=255; res.len=3343 [2025-09-08 15:05:11][352822350432085][6651 ms][DEBUG] END runCmdUntilRes#1 in 6217 ms [2025-09-08 15:05:11][352822350432085][6651 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:05:15][352822350432085][0 ms][INFO] === Request start === [2025-09-08 15:05:15][352822350432085][1 ms][DEBUG] START check_scloud [2025-09-08 15:05:15][352822350432085][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:05:15][352822350432085][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 1775 15610 24545088 158928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:05:15][352822350432085][316 ms][DEBUG] targetPkg: running [2025-09-08 15:05:15][352822350432085][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 15:05:15][352822350432085][316 ms][DEBUG] START check_boot_completed [2025-09-08 15:05:15][352822350432085][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:05:15][352822350432085][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:05:15][352822350432085][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:05:15][352822350432085][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:05:15][352822350432085][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:05:15][352822350432085][409 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:05:15][352822350432085][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352822350432085\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6953\"}'\'' -e'"" [2025-09-08 15:05:15][352822350432085][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:05:15][352822350432085][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352822350432085\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6953\"}'\'' -e'"" [2025-09-08 15:05:19][352822350432085][4440 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7bd3630d-a96d-4cab-a723-10db56bcd3ce","id":"QR_7bd3630d-a96d-4cab-a723-10db56bcd3ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:05:19][352822350432085][4596 ms][DEBUG] proc_open done in 4187 ms; code=255; res.len=3343 [2025-09-08 15:05:19][352822350432085][4596 ms][DEBUG] END runCmdUntilRes#1 in 4187 ms [2025-09-08 15:05:19][352822350432085][4596 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:06:04][353310804004717][0 ms][INFO] === Request start === [2025-09-08 15:06:04][353310804004717][0 ms][DEBUG] START check_scloud [2025-09-08 15:06:04][353310804004717][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:06:04][353310804004717][276 ms][DEBUG] SU: done in 276 ms; outu0_a118 1775 15610 24658816 158432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:06:04][353310804004717][276 ms][DEBUG] targetPkg: running [2025-09-08 15:06:04][353310804004717][276 ms][DEBUG] END check_scloud in 276 ms [2025-09-08 15:06:04][353310804004717][276 ms][DEBUG] START check_boot_completed [2025-09-08 15:06:04][353310804004717][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:06:04][353310804004717][321 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 15:06:04][353310804004717][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:06:04][353310804004717][384 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 15:06:04][353310804004717][384 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 15:06:04][353310804004717][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:06:04][353310804004717][542 ms][DEBUG] SU: done in 158 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2913\nsuccessfulTxPacketsPerSecond: 1.3312391406071467\nretriedTxPackets: 644\nretriedTxPacketsPerSecond: 0.2502874678525698\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2682\nsuccessfulRxPacketsPerSecond: 1.1643808287054334\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:06:04][353310804004717][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:06:06][353310804004717][2227 ms][DEBUG] SU: done in 1685 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.839/198.839/198.839/0.000 ms\n [2025-09-08 15:06:06][353310804004717][2227 ms][DEBUG] check_internet: online [2025-09-08 15:06:06][353310804004717][2227 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:06:06][353310804004717][2227 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804004717\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2707\"}'\'' -e'"" [2025-09-08 15:06:06][353310804004717][2228 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:06:06][353310804004717][2228 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804004717\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2707\"}'\'' -e'"" [2025-09-08 15:06:09][353310804004717][5773 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2744b3d-3091-4a2e-abac-1bdc185545f1","id":"QR_e2744b3d-3091-4a2e-abac-1bdc185545f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:06:10][353310804004717][5929 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-08 15:06:10][353310804004717][5929 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-08 15:06:10][353310804004717][5929 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:06:12][353310804004717][0 ms][INFO] === Request start === [2025-09-08 15:06:12][353310804004717][1 ms][DEBUG] START check_scloud [2025-09-08 15:06:12][353310804004717][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:06:12][353310804004717][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 1775 15610 24801288 170056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:06:12][353310804004717][295 ms][DEBUG] targetPkg: running [2025-09-08 15:06:12][353310804004717][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-08 15:06:12][353310804004717][296 ms][DEBUG] START check_boot_completed [2025-09-08 15:06:12][353310804004717][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:06:12][353310804004717][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:06:12][353310804004717][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:06:12][353310804004717][404 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 15:06:12][353310804004717][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 15:06:12][353310804004717][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:06:13][353310804004717][545 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2913\nsuccessfulTxPacketsPerSecond: 1.3312391406071467\nretriedTxPackets: 644\nretriedTxPacketsPerSecond: 0.2502874678525698\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2682\nsuccessfulRxPacketsPerSecond: 1.1643808287054334\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:06:13][353310804004717][545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:06:13][353310804004717][889 ms][DEBUG] SU: done in 343 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.457/232.457/232.457/0.000 ms\n [2025-09-08 15:06:13][353310804004717][889 ms][DEBUG] check_internet: online [2025-09-08 15:06:13][353310804004717][889 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:06:13][353310804004717][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804004717\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7970\"}'\'' -e'"" [2025-09-08 15:06:13][353310804004717][889 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:06:13][353310804004717][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804004717\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7970\"}'\'' -e'"" [2025-09-08 15:06:18][353310804004717][5731 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e266f7f7-0017-4666-997f-1d97117b613f","id":"QR_e266f7f7-0017-4666-997f-1d97117b613f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:06:18][353310804004717][5887 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-08 15:06:18][353310804004717][5887 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-08 15:06:18][353310804004717][5887 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:07:05][353437176170139][0 ms][INFO] === Request start === [2025-09-08 15:07:05][353437176170139][0 ms][DEBUG] START check_scloud [2025-09-08 15:07:05][353437176170139][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:07:05][353437176170139][250 ms][DEBUG] SU: done in 250 ms; outu0_a118 1775 15610 24935624 180880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:07:05][353437176170139][250 ms][DEBUG] targetPkg: running [2025-09-08 15:07:05][353437176170139][250 ms][DEBUG] END check_scloud in 250 ms [2025-09-08 15:07:05][353437176170139][250 ms][DEBUG] START check_boot_completed [2025-09-08 15:07:05][353437176170139][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:07:05][353437176170139][281 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:07:05][353437176170139][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:07:05][353437176170139][328 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:07:05][353437176170139][328 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:07:05][353437176170139][328 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:07:05][353437176170139][328 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353437176170139\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5052\"}'\'' -e'"" [2025-09-08 15:07:05][353437176170139][328 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:07:05][353437176170139][328 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353437176170139\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5052\"}'\'' -e'"" [2025-09-08 15:07:09][353437176170139][4546 ms][DEBUG] proc_open done in 4218 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 15:07:09][353437176170139][4546 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-09-08 15:07:09][353437176170139][4546 ms][WARN] Detected error: Process with pid 1775 either refused to load frida-agent, or terminated during injectionProcess with pid 1775 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 15:07:09][353437176170139][4546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 15:07:09][353437176170139][4827 ms][DEBUG] SU: done in 281 ms; outsystem 15808 15610 12713344 191512 ep_poll 0 S system_server\n [2025-09-08 15:07:09][353437176170139][4827 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 15:07:10][353437176170139][4967 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 15:07:10][353437176170139][4968 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 15:07:10][353437176170139][4968 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 15:07:10][353437176170139][5077 ms][DEBUG] SU: done in 109 ms; out [2025-09-08 15:07:10][353437176170139][5077 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 15:07:10][353437176170139][5249 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 15:07:12][353437176170139][7264 ms][DEBUG] START check_boot_completed [2025-09-08 15:07:12][353437176170139][7264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:07:12][353437176170139][7295 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:07:12][353437176170139][7295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:07:12][353437176170139][7342 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:07:12][353437176170139][7342 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:07:15][353437176170139][10357 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 15:07:15][353437176170139][10357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353437176170139\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5052\"}'\'' -e'"" [2025-09-08 15:07:21][353437176170139][16027 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7560d8b9-ea9b-41f1-967e-cb12ac02ce0a","id":"QR_7560d8b9-ea9b-41f1-967e-cb12ac02ce0a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:07:21][353437176170139][16184 ms][DEBUG] proc_open done in 5827 ms; code=255; res.len=3343 [2025-09-08 15:07:21][353437176170139][16184 ms][DEBUG] END runCmdUntilRes#2 in 5827 ms [2025-09-08 15:07:21][353437176170139][16184 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:07:24][353437176170139][0 ms][INFO] === Request start === [2025-09-08 15:07:24][353437176170139][1 ms][DEBUG] START check_scloud [2025-09-08 15:07:24][353437176170139][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:07:25][353437176170139][245 ms][DEBUG] SU: done in 244 ms; outu0_a118 4379 15610 23656736 123596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:07:25][353437176170139][245 ms][DEBUG] targetPkg: running [2025-09-08 15:07:25][353437176170139][245 ms][DEBUG] END check_scloud in 244 ms [2025-09-08 15:07:25][353437176170139][245 ms][DEBUG] START check_boot_completed [2025-09-08 15:07:25][353437176170139][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:07:25][353437176170139][291 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:07:25][353437176170139][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:07:25][353437176170139][354 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 15:07:25][353437176170139][354 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 15:07:25][353437176170139][354 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:07:25][353437176170139][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353437176170139\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2740\"}'\'' -e'"" [2025-09-08 15:07:25][353437176170139][354 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:07:25][353437176170139][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353437176170139\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2740\"}'\'' -e'"" [2025-09-08 15:07:29][353437176170139][4165 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_163c0f13-5bd2-422e-b16c-75f2d07e730c","id":"QR_163c0f13-5bd2-422e-b16c-75f2d07e730c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:07:29][353437176170139][4322 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-09-08 15:07:29][353437176170139][4322 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-09-08 15:07:29][353437176170139][4322 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:09:03][351240640815707][1 ms][INFO] === Request start === [2025-09-08 15:09:03][351240640815707][1 ms][DEBUG] START check_scloud [2025-09-08 15:09:03][351240640815707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:09:03][351240640815707][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 4379 15610 23712984 137164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:09:03][351240640815707][319 ms][DEBUG] targetPkg: running [2025-09-08 15:09:03][351240640815707][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 15:09:03][351240640815707][319 ms][DEBUG] START check_boot_completed [2025-09-08 15:09:03][351240640815707][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:09:03][351240640815707][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:09:03][351240640815707][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:09:03][351240640815707][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 15:09:03][351240640815707][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 15:09:03][351240640815707][429 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:09:03][351240640815707][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640815707\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1315\"}'\'' -e'"" [2025-09-08 15:09:03][351240640815707][429 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:09:03][351240640815707][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640815707\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1315\"}'\'' -e'"" [2025-09-08 15:09:08][351240640815707][5130 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cddb3f06-6591-44a1-9f81-db47576577bb","id":"QR_cddb3f06-6591-44a1-9f81-db47576577bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:09:08][351240640815707][5287 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-08 15:09:08][351240640815707][5287 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-08 15:09:08][351240640815707][5287 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:09:10][351240640815707][0 ms][INFO] === Request start === [2025-09-08 15:09:10][351240640815707][1 ms][DEBUG] START check_scloud [2025-09-08 15:09:10][351240640815707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:09:11][351240640815707][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 4379 15610 23862548 149032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:09:11][351240640815707][318 ms][DEBUG] targetPkg: running [2025-09-08 15:09:11][351240640815707][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 15:09:11][351240640815707][318 ms][DEBUG] START check_boot_completed [2025-09-08 15:09:11][351240640815707][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:09:11][351240640815707][364 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 15:09:11][351240640815707][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:09:11][351240640815707][412 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 15:09:11][351240640815707][412 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 15:09:11][351240640815707][413 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:09:11][351240640815707][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640815707\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2212\"}'\'' -e'"" [2025-09-08 15:09:11][351240640815707][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:09:11][351240640815707][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640815707\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2212\"}'\'' -e'"" [2025-09-08 15:09:16][351240640815707][5581 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b03e0ace-9683-4d6a-92da-f620ce186b77","id":"QR_b03e0ace-9683-4d6a-92da-f620ce186b77","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:09:16][351240640815707][5737 ms][DEBUG] proc_open done in 5324 ms; code=255; res.len=3343 [2025-09-08 15:09:16][351240640815707][5737 ms][DEBUG] END runCmdUntilRes#1 in 5324 ms [2025-09-08 15:09:16][351240640815707][5737 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:11:03][357435846628391][0 ms][INFO] === Request start === [2025-09-08 15:11:03][357435846628391][1 ms][DEBUG] START check_scloud [2025-09-08 15:11:03][357435846628391][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:11:03][357435846628391][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 4379 15610 23982292 160504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:11:03][357435846628391][306 ms][DEBUG] targetPkg: running [2025-09-08 15:11:03][357435846628391][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 15:11:03][357435846628391][306 ms][DEBUG] START check_boot_completed [2025-09-08 15:11:03][357435846628391][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:11:04][357435846628391][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:11:04][357435846628391][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:11:04][357435846628391][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:11:04][357435846628391][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 15:11:04][357435846628391][400 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:11:04][357435846628391][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435846628391\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4352\"}'\'' -e'"" [2025-09-08 15:11:04][357435846628391][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:11:04][357435846628391][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435846628391\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4352\"}'\'' -e'"" [2025-09-08 15:11:08][357435846628391][4914 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_146a2f9b-7373-4002-8e3d-fd24275562ab","id":"QR_146a2f9b-7373-4002-8e3d-fd24275562ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:11:08][357435846628391][5070 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-09-08 15:11:08][357435846628391][5070 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-09-08 15:11:08][357435846628391][5070 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:11:11][357435846628391][1 ms][INFO] === Request start === [2025-09-08 15:11:11][357435846628391][1 ms][DEBUG] START check_scloud [2025-09-08 15:11:11][357435846628391][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:11:11][357435846628391][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 4379 15610 24128988 171432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:11:11][357435846628391][304 ms][DEBUG] targetPkg: running [2025-09-08 15:11:11][357435846628391][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 15:11:11][357435846628391][304 ms][DEBUG] START check_boot_completed [2025-09-08 15:11:11][357435846628391][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:11:11][357435846628391][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:11:11][357435846628391][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:11:11][357435846628391][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 15:11:11][357435846628391][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 15:11:11][357435846628391][413 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:11:11][357435846628391][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435846628391\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4728\"}'\'' -e'"" [2025-09-08 15:11:11][357435846628391][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:11:11][357435846628391][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435846628391\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4728\"}'\'' -e'"" [2025-09-08 15:11:16][357435846628391][5208 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81532486-9714-4c03-abf1-1fc1cb472687","id":"QR_81532486-9714-4c03-abf1-1fc1cb472687","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:11:16][357435846628391][5364 ms][DEBUG] proc_open done in 4951 ms; code=255; res.len=3343 [2025-09-08 15:11:16][357435846628391][5364 ms][DEBUG] END runCmdUntilRes#1 in 4951 ms [2025-09-08 15:11:16][357435846628391][5364 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:12:06][352617378982149][0 ms][INFO] === Request start === [2025-09-08 15:12:06][352617378982149][1 ms][DEBUG] START check_scloud [2025-09-08 15:12:06][352617378982149][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:12:06][352617378982149][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 4379 15610 24235932 182856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:12:06][352617378982149][308 ms][DEBUG] targetPkg: running [2025-09-08 15:12:06][352617378982149][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 15:12:06][352617378982149][308 ms][DEBUG] START check_boot_completed [2025-09-08 15:12:06][352617378982149][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:12:06][352617378982149][352 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 15:12:06][352617378982149][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:12:06][352617378982149][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:12:06][352617378982149][400 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 15:12:06][352617378982149][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:12:06][352617378982149][509 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3221\nsuccessfulTxPacketsPerSecond: 1.022467732511818\nretriedTxPackets: 716\nretriedTxPacketsPerSecond: 0.23901843097678865\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2954\nsuccessfulRxPacketsPerSecond: 0.9029585170234238\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:12:06][352617378982149][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:12:07][352617378982149][1759 ms][DEBUG] SU: done in 1250 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.151/199.151/199.151/0.000 ms\n [2025-09-08 15:12:07][352617378982149][1759 ms][DEBUG] check_internet: online [2025-09-08 15:12:07][352617378982149][1759 ms][DEBUG] rawBody.length=1170 [2025-09-08 15:12:07][352617378982149][1759 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352617378982149\",\"model\":\"SM-T500\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9XR406JYXX\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1060\"}'\'' -e'"" [2025-09-08 15:12:07][352617378982149][1759 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:12:07][352617378982149][1759 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352617378982149\",\"model\":\"SM-T500\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9XR406JYXX\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1060\"}'\'' -e'"" [2025-09-08 15:12:12][352617378982149][6179 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bfda911a-7599-44cf-b566-982ae9866156","id":"QR_bfda911a-7599-44cf-b566-982ae9866156","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:12:12][352617378982149][6335 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-09-08 15:12:12][352617378982149][6335 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-09-08 15:12:12][352617378982149][6335 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:14:03][355644565272305][1 ms][INFO] === Request start === [2025-09-08 15:14:03][355644565272305][1 ms][DEBUG] START check_scloud [2025-09-08 15:14:03][355644565272305][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:14:04][355644565272305][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 4379 15610 24375232 193992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:14:04][355644565272305][265 ms][DEBUG] targetPkg: running [2025-09-08 15:14:04][355644565272305][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-08 15:14:04][355644565272305][265 ms][DEBUG] START check_boot_completed [2025-09-08 15:14:04][355644565272305][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:14:04][355644565272305][311 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:14:04][355644565272305][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:14:04][355644565272305][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:14:04][355644565272305][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:14:04][355644565272305][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:14:04][355644565272305][452 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3400\nsuccessfulTxPacketsPerSecond: 0.5947179741048497\nretriedTxPackets: 758\nretriedTxPacketsPerSecond: 0.13954276487376363\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3111\nsuccessfulRxPacketsPerSecond: 0.5216241448852593\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:14:04][355644565272305][452 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:14:04][355644565272305][764 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=215 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 215.135/215.135/215.135/0.000 ms\n [2025-09-08 15:14:04][355644565272305][764 ms][DEBUG] check_internet: online [2025-09-08 15:14:04][355644565272305][764 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:14:04][355644565272305][764 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355644565272305\",\"model\":\"SM-M127G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7998\"}'\'' -e'"" [2025-09-08 15:14:04][355644565272305][764 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:14:04][355644565272305][764 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355644565272305\",\"model\":\"SM-M127G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7998\"}'\'' -e'"" [2025-09-08 15:14:09][355644565272305][5451 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 15:14:09][355644565272305][5607 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=115 [2025-09-08 15:14:09][355644565272305][5607 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-08 15:14:09][355644565272305][5607 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 15:14:09][][0 ms][INFO] === Request start === [2025-09-08 15:14:09][][1 ms][DEBUG] START check_scloud [2025-09-08 15:14:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:14:10][][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 4379 15610 24517640 205376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:14:10][][306 ms][DEBUG] targetPkg: running [2025-09-08 15:14:10][][306 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 15:14:10][][306 ms][DEBUG] START check_boot_completed [2025-09-08 15:14:10][][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:14:10][][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:14:10][][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:14:10][][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:14:10][][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:14:10][][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:14:10][][494 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3400\nsuccessfulTxPacketsPerSecond: 0.5947179741048497\nretriedTxPackets: 758\nretriedTxPacketsPerSecond: 0.13954276487376363\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3111\nsuccessfulRxPacketsPerSecond: 0.5216241448852593\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:14:10][][494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:14:10][][775 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.093/163.093/163.093/0.000 ms\n [2025-09-08 15:14:10][][775 ms][DEBUG] check_internet: online [2025-09-08 15:14:10][][775 ms][DEBUG] rawBody.length=1131 [2025-09-08 15:14:10][][775 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M127G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T20PZVQY\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4773\"}'\'' -e'"" [2025-09-08 15:14:10][][775 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:14:10][][775 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M127G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T20PZVQY\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4773\"}'\'' -e'"" [2025-09-08 15:14:13][][3868 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 15:14:13][][4024 ms][DEBUG] proc_open done in 3249 ms; code=255; res.len=115 [2025-09-08 15:14:13][][4024 ms][DEBUG] END runCmdUntilRes#1 in 3249 ms [2025-09-08 15:14:13][][4024 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 15:14:15][355644565272305][0 ms][INFO] === Request start === [2025-09-08 15:14:15][355644565272305][1 ms][DEBUG] START check_scloud [2025-09-08 15:14:15][355644565272305][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:14:15][355644565272305][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 4379 15610 24680592 216104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:14:15][355644565272305][325 ms][DEBUG] targetPkg: running [2025-09-08 15:14:15][355644565272305][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 15:14:15][355644565272305][325 ms][DEBUG] START check_boot_completed [2025-09-08 15:14:15][355644565272305][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:14:15][355644565272305][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:14:15][355644565272305][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:14:15][355644565272305][418 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:14:15][355644565272305][418 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 15:14:15][355644565272305][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:14:16][355644565272305][560 ms][DEBUG] SU: done in 142 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3400\nsuccessfulTxPacketsPerSecond: 0.5947179741048497\nretriedTxPackets: 758\nretriedTxPacketsPerSecond: 0.13954276487376363\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3111\nsuccessfulRxPacketsPerSecond: 0.5216241448852593\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:14:16][355644565272305][561 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:14:16][355644565272305][824 ms][DEBUG] SU: done in 264 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=162 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 162.531/162.531/162.531/0.000 ms\n [2025-09-08 15:14:16][355644565272305][825 ms][DEBUG] check_internet: online [2025-09-08 15:14:16][355644565272305][825 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:14:16][355644565272305][825 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355644565272305\",\"model\":\"SM-M127G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7206\"}'\'' -e'"" [2025-09-08 15:14:16][355644565272305][825 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:14:16][355644565272305][825 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355644565272305\",\"model\":\"SM-M127G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7206\"}'\'' -e'"" [2025-09-08 15:14:20][355644565272305][5198 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d14e4d96-c56f-4cdb-a417-007b5e715969","id":"QR_d14e4d96-c56f-4cdb-a417-007b5e715969","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:14:20][355644565272305][5354 ms][DEBUG] proc_open done in 4529 ms; code=255; res.len=3343 [2025-09-08 15:14:20][355644565272305][5354 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-09-08 15:14:20][355644565272305][5355 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:17:03][350247871714559][1 ms][INFO] === Request start === [2025-09-08 15:17:03][350247871714559][1 ms][DEBUG] START check_scloud [2025-09-08 15:17:03][350247871714559][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:17:03][350247871714559][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 4379 15610 24784172 228584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:17:03][350247871714559][309 ms][DEBUG] targetPkg: running [2025-09-08 15:17:03][350247871714559][309 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 15:17:03][350247871714559][309 ms][DEBUG] START check_boot_completed [2025-09-08 15:17:03][350247871714559][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:17:03][350247871714559][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:17:03][350247871714559][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:17:03][350247871714559][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:17:03][350247871714559][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:17:03][350247871714559][387 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:17:03][350247871714559][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247871714559\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8336\"}'\'' -e'"" [2025-09-08 15:17:03][350247871714559][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:17:03][350247871714559][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247871714559\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8336\"}'\'' -e'"" [2025-09-08 15:17:08][350247871714559][5276 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0efe7128-e0dc-43a7-b511-156be8767e58","id":"QR_0efe7128-e0dc-43a7-b511-156be8767e58","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:17:08][350247871714559][5432 ms][DEBUG] proc_open done in 5046 ms; code=255; res.len=3343 [2025-09-08 15:17:08][350247871714559][5432 ms][DEBUG] END runCmdUntilRes#1 in 5046 ms [2025-09-08 15:17:08][350247871714559][5432 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:17:11][350247871714559][0 ms][INFO] === Request start === [2025-09-08 15:17:11][350247871714559][1 ms][DEBUG] START check_scloud [2025-09-08 15:17:11][350247871714559][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:17:11][350247871714559][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 4379 15610 24943156 239512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:17:11][350247871714559][314 ms][DEBUG] targetPkg: running [2025-09-08 15:17:11][350247871714559][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 15:17:11][350247871714559][314 ms][DEBUG] START check_boot_completed [2025-09-08 15:17:11][350247871714559][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:17:11][350247871714559][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:17:11][350247871714559][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:17:11][350247871714559][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:17:11][350247871714559][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:17:11][350247871714559][392 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:17:11][350247871714559][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247871714559\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8545\"}'\'' -e'"" [2025-09-08 15:17:11][350247871714559][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:17:11][350247871714559][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247871714559\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8545\"}'\'' -e'"" [2025-09-08 15:17:15][350247871714559][4188 ms][DEBUG] proc_open done in 3796 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 15:17:15][350247871714559][4188 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-09-08 15:17:15][350247871714559][4188 ms][WARN] Detected error: Process with pid 4379 either refused to load frida-agent, or terminated during injectionProcess with pid 4379 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 15:17:15][350247871714559][4188 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 15:17:15][350247871714559][4453 ms][DEBUG] SU: done in 266 ms; outsystem 15808 15610 12606364 178160 ep_poll 0 S system_server\n [2025-09-08 15:17:15][350247871714559][4453 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 15:17:15][350247871714559][4609 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 15:17:15][350247871714559][4609 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 15:17:15][350247871714559][4609 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 15:17:15][350247871714559][4735 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 15:17:15][350247871714559][4735 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 15:17:16][350247871714559][4892 ms][DEBUG] SU: done in 157 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 15:17:18][350247871714559][6906 ms][DEBUG] START check_boot_completed [2025-09-08 15:17:18][350247871714559][6906 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:17:18][350247871714559][6953 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:17:18][350247871714559][6953 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:17:18][350247871714559][6999 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:17:18][350247871714559][6999 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 15:17:21][350247871714559][10014 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 15:17:21][350247871714559][10014 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247871714559\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8545\"}'\'' -e'"" [2025-09-08 15:17:26][350247871714559][15060 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df563def-d61d-45d5-b318-e1d5976f9fac","id":"QR_df563def-d61d-45d5-b318-e1d5976f9fac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:17:26][350247871714559][15216 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-08 15:17:26][350247871714559][15216 ms][DEBUG] END runCmdUntilRes#2 in 5202 ms [2025-09-08 15:17:26][350247871714559][15216 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:18:05][353647611588790][0 ms][INFO] === Request start === [2025-09-08 15:18:05][353647611588790][1 ms][DEBUG] START check_scloud [2025-09-08 15:18:05][353647611588790][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:18:05][353647611588790][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 6256 15610 23577620 126820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:18:05][353647611588790][323 ms][DEBUG] targetPkg: running [2025-09-08 15:18:05][353647611588790][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-08 15:18:05][353647611588790][323 ms][DEBUG] START check_boot_completed [2025-09-08 15:18:05][353647611588790][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:18:05][353647611588790][370 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:18:05][353647611588790][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:18:05][353647611588790][418 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 15:18:05][353647611588790][419 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 15:18:05][353647611588790][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:18:05][353647611588790][542 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3497\nsuccessfulTxPacketsPerSecond: 0.7323407725062664\nretriedTxPackets: 785\nretriedTxPacketsPerSecond: 0.20384743152236282\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3190\nsuccessfulRxPacketsPerSecond: 0.5964424848246912\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:18:05][353647611588790][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:18:07][353647611588790][1854 ms][DEBUG] SU: done in 1312 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.760/198.760/198.760/0.000 ms\n [2025-09-08 15:18:07][353647611588790][1854 ms][DEBUG] check_internet: online [2025-09-08 15:18:07][353647611588790][1854 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:18:07][353647611588790][1854 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353647611588790\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4013\"}'\'' -e'"" [2025-09-08 15:18:07][353647611588790][1855 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:18:07][353647611588790][1855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353647611588790\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4013\"}'\'' -e'"" [2025-09-08 15:18:10][353647611588790][5337 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 15:18:10][353647611588790][5494 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=107 [2025-09-08 15:18:10][353647611588790][5494 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-09-08 15:18:10][353647611588790][5494 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 15:18:11][][0 ms][INFO] === Request start === [2025-09-08 15:18:11][][1 ms][DEBUG] START check_scloud [2025-09-08 15:18:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:18:11][][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 6256 15610 23703644 137504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:18:11][][315 ms][DEBUG] targetPkg: running [2025-09-08 15:18:11][][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 15:18:11][][315 ms][DEBUG] START check_boot_completed [2025-09-08 15:18:11][][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:18:11][][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:18:11][][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:18:11][][410 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 15:18:11][][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 15:18:11][][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:18:11][][533 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3497\nsuccessfulTxPacketsPerSecond: 0.7323407725062664\nretriedTxPackets: 785\nretriedTxPacketsPerSecond: 0.20384743152236282\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3190\nsuccessfulRxPacketsPerSecond: 0.5964424848246912\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:18:11][][534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:18:11][][799 ms][DEBUG] SU: done in 265 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.663/163.663/163.663/0.000 ms\n [2025-09-08 15:18:11][][799 ms][DEBUG] check_internet: online [2025-09-08 15:18:11][][799 ms][DEBUG] rawBody.length=1131 [2025-09-08 15:18:11][][799 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT40PG6HZ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8287\"}'\'' -e'"" [2025-09-08 15:18:11][][799 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:18:11][][799 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT40PG6HZ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8287\"}'\'' -e'"" [2025-09-08 15:18:14][][3845 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 15:18:15][][4001 ms][DEBUG] proc_open done in 3202 ms; code=255; res.len=107 [2025-09-08 15:18:15][][4001 ms][DEBUG] END runCmdUntilRes#1 in 3202 ms [2025-09-08 15:18:15][][4001 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 15:18:16][353647611588790][0 ms][INFO] === Request start === [2025-09-08 15:18:16][353647611588790][1 ms][DEBUG] START check_scloud [2025-09-08 15:18:16][353647611588790][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:18:16][353647611588790][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 6256 15610 23878884 148748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:18:16][353647611588790][273 ms][DEBUG] targetPkg: running [2025-09-08 15:18:16][353647611588790][273 ms][DEBUG] END check_scloud in 273 ms [2025-09-08 15:18:16][353647611588790][274 ms][DEBUG] START check_boot_completed [2025-09-08 15:18:16][353647611588790][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:18:16][353647611588790][320 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:18:16][353647611588790][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:18:17][353647611588790][367 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:18:17][353647611588790][367 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:18:17][353647611588790][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:18:17][353647611588790][476 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3497\nsuccessfulTxPacketsPerSecond: 0.7323407725062664\nretriedTxPackets: 785\nretriedTxPacketsPerSecond: 0.20384743152236282\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3190\nsuccessfulRxPacketsPerSecond: 0.5964424848246912\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:18:17][353647611588790][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:18:17][353647611588790][820 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=233 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 233.318/233.318/233.318/0.000 ms\n [2025-09-08 15:18:17][353647611588790][820 ms][DEBUG] check_internet: online [2025-09-08 15:18:17][353647611588790][820 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:18:17][353647611588790][820 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353647611588790\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5961\"}'\'' -e'"" [2025-09-08 15:18:17][353647611588790][820 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:18:17][353647611588790][820 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353647611588790\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5961\"}'\'' -e'"" [2025-09-08 15:18:22][353647611588790][5459 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1ee89fe-5150-430d-94e1-0f5a3d8dd1d2","id":"QR_d1ee89fe-5150-430d-94e1-0f5a3d8dd1d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:18:22][353647611588790][5616 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 15:18:22][353647611588790][5616 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 15:18:22][353647611588790][5616 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:19:04][351877475520983][1 ms][INFO] === Request start === [2025-09-08 15:19:04][351877475520983][1 ms][DEBUG] START check_scloud [2025-09-08 15:19:04][351877475520983][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:19:04][351877475520983][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 6256 15610 23982208 159868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:19:04][351877475520983][303 ms][DEBUG] targetPkg: running [2025-09-08 15:19:04][351877475520983][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 15:19:04][351877475520983][303 ms][DEBUG] START check_boot_completed [2025-09-08 15:19:04][351877475520983][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:19:04][351877475520983][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:19:04][351877475520983][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:19:04][351877475520983][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:19:04][351877475520983][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:19:04][351877475520983][382 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:19:04][351877475520983][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877475520983\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8396\"}'\'' -e'"" [2025-09-08 15:19:04][351877475520983][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:19:04][351877475520983][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877475520983\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8396\"}'\'' -e'"" [2025-09-08 15:19:08][351877475520983][3974 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a1d5c67-31fb-4e54-89b4-dce584584e03","id":"QR_0a1d5c67-31fb-4e54-89b4-dce584584e03","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:19:08][351877475520983][4131 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-09-08 15:19:08][351877475520983][4131 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-08 15:19:08][351877475520983][4131 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:19:10][351877475520983][0 ms][INFO] === Request start === [2025-09-08 15:19:10][351877475520983][1 ms][DEBUG] START check_scloud [2025-09-08 15:19:10][351877475520983][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:19:10][351877475520983][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 6256 15610 24126792 171552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:19:10][351877475520983][305 ms][DEBUG] targetPkg: running [2025-09-08 15:19:10][351877475520983][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 15:19:10][351877475520983][305 ms][DEBUG] START check_boot_completed [2025-09-08 15:19:10][351877475520983][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:19:11][351877475520983][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:19:11][351877475520983][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:19:11][351877475520983][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:19:11][351877475520983][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:19:11][351877475520983][398 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:19:11][351877475520983][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877475520983\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1321\"}'\'' -e'"" [2025-09-08 15:19:11][351877475520983][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:19:11][351877475520983][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877475520983\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1321\"}'\'' -e'"" [2025-09-08 15:19:16][351877475520983][6240 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66927304-8835-4602-a622-b5c9ecb22876","id":"QR_66927304-8835-4602-a622-b5c9ecb22876","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:19:17][351877475520983][6397 ms][DEBUG] proc_open done in 5998 ms; code=255; res.len=3343 [2025-09-08 15:19:17][351877475520983][6397 ms][DEBUG] END runCmdUntilRes#1 in 5999 ms [2025-09-08 15:19:17][351877475520983][6397 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:21:03][350026551753784][0 ms][INFO] === Request start === [2025-09-08 15:21:03][350026551753784][1 ms][DEBUG] START check_scloud [2025-09-08 15:21:03][350026551753784][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:21:03][350026551753784][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 6256 15610 24262492 182536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:21:03][350026551753784][320 ms][DEBUG] targetPkg: running [2025-09-08 15:21:03][350026551753784][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 15:21:03][350026551753784][320 ms][DEBUG] START check_boot_completed [2025-09-08 15:21:03][350026551753784][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:21:04][350026551753784][366 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:21:04][350026551753784][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:21:04][350026551753784][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:21:04][350026551753784][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:21:04][350026551753784][413 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:21:04][350026551753784][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026551753784\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3330\"}'\'' -e'"" [2025-09-08 15:21:04][350026551753784][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:21:04][350026551753784][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026551753784\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3330\"}'\'' -e'"" [2025-09-08 15:21:08][350026551753784][4896 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc0f5236-b760-4de4-8d0b-4723c3e8ea3d","id":"QR_fc0f5236-b760-4de4-8d0b-4723c3e8ea3d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:21:08][350026551753784][5052 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-08 15:21:08][350026551753784][5053 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-08 15:21:08][350026551753784][5053 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:21:11][350026551753784][1 ms][INFO] === Request start === [2025-09-08 15:21:11][350026551753784][1 ms][DEBUG] START check_scloud [2025-09-08 15:21:11][350026551753784][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:21:11][350026551753784][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 6256 15610 24428516 194244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:21:11][350026551753784][285 ms][DEBUG] targetPkg: running [2025-09-08 15:21:11][350026551753784][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-08 15:21:11][350026551753784][285 ms][DEBUG] START check_boot_completed [2025-09-08 15:21:11][350026551753784][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:21:11][350026551753784][331 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:21:11][350026551753784][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:21:11][350026551753784][394 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 15:21:11][350026551753784][394 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 15:21:11][350026551753784][394 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:21:11][350026551753784][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026551753784\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6903\"}'\'' -e'"" [2025-09-08 15:21:11][350026551753784][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:21:11][350026551753784][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026551753784\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6903\"}'\'' -e'"" [2025-09-08 15:21:15][350026551753784][4893 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7fe49acd-01ed-4ae8-9c83-f7766ee2db1d","id":"QR_7fe49acd-01ed-4ae8-9c83-f7766ee2db1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:21:16][350026551753784][5049 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-09-08 15:21:16][350026551753784][5049 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-09-08 15:21:16][350026551753784][5049 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:26:04][357052523506301][1 ms][INFO] === Request start === [2025-09-08 15:26:04][357052523506301][1 ms][DEBUG] START check_scloud [2025-09-08 15:26:04][357052523506301][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:26:05][357052523506301][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 6256 15610 24566756 206036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:26:05][357052523506301][311 ms][DEBUG] targetPkg: running [2025-09-08 15:26:05][357052523506301][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 15:26:05][357052523506301][311 ms][DEBUG] START check_boot_completed [2025-09-08 15:26:05][357052523506301][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:26:05][357052523506301][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:26:05][357052523506301][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:26:05][357052523506301][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:26:05][357052523506301][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:26:05][357052523506301][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:26:05][357052523506301][514 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3809\nsuccessfulTxPacketsPerSecond: 0.48399489385386985\nretriedTxPackets: 868\nretriedTxPacketsPerSecond: 0.10889885111712072\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3453\nsuccessfulRxPacketsPerSecond: 0.41139565977578935\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:26:05][357052523506301][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:26:06][357052523506301][1763 ms][DEBUG] SU: done in 1249 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.638/205.638/205.638/0.000 ms\n [2025-09-08 15:26:06][357052523506301][1763 ms][DEBUG] check_internet: online [2025-09-08 15:26:06][357052523506301][1763 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:26:06][357052523506301][1763 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357052523506301\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YW10ER6LN\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7243\"}'\'' -e'"" [2025-09-08 15:26:06][357052523506301][1763 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:26:06][357052523506301][1763 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357052523506301\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YW10ER6LN\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7243\"}'\'' -e'"" [2025-09-08 15:26:10][357052523506301][5793 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6dc44909-31ef-4ef4-abd7-a44790151ba1","id":"QR_6dc44909-31ef-4ef4-abd7-a44790151ba1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:26:10][357052523506301][5950 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-08 15:26:10][357052523506301][5950 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-08 15:26:10][357052523506301][5950 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:26:12][354747957001736][0 ms][INFO] === Request start === [2025-09-08 15:26:12][354747957001736][1 ms][DEBUG] START check_scloud [2025-09-08 15:26:12][354747957001736][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:26:13][354747957001736][255 ms][DEBUG] SU: done in 255 ms; outu0_a118 6256 15610 24713324 217764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:26:13][354747957001736][255 ms][DEBUG] targetPkg: running [2025-09-08 15:26:13][354747957001736][255 ms][DEBUG] END check_scloud in 255 ms [2025-09-08 15:26:13][354747957001736][256 ms][DEBUG] START check_boot_completed [2025-09-08 15:26:13][354747957001736][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:26:13][354747957001736][302 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:26:13][354747957001736][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:26:13][354747957001736][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:26:13][354747957001736][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:26:13][354747957001736][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:26:13][354747957001736][443 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3809\nsuccessfulTxPacketsPerSecond: 0.48399489385386985\nretriedTxPackets: 868\nretriedTxPacketsPerSecond: 0.10889885111712072\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3453\nsuccessfulRxPacketsPerSecond: 0.41139565977578935\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:26:13][354747957001736][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:26:13][354747957001736][724 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.833/186.833/186.833/0.000 ms\n [2025-09-08 15:26:13][354747957001736][724 ms][DEBUG] check_internet: online [2025-09-08 15:26:13][354747957001736][724 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:26:13][354747957001736][724 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957001736\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5669\"}'\'' -e'"" [2025-09-08 15:26:13][354747957001736][724 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:26:13][354747957001736][724 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957001736\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5669\"}'\'' -e'"" [2025-09-08 15:26:17][354747957001736][4129 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12a35dd4-fb27-4038-ab16-a5bc6a1f0afc","id":"QR_12a35dd4-fb27-4038-ab16-a5bc6a1f0afc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:26:17][354747957001736][4285 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-08 15:26:17][354747957001736][4285 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-09-08 15:26:17][354747957001736][4285 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:26:19][354747957001736][0 ms][INFO] === Request start === [2025-09-08 15:26:19][354747957001736][1 ms][DEBUG] START check_scloud [2025-09-08 15:26:19][354747957001736][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:26:19][354747957001736][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 6256 15610 24884468 228744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:26:19][354747957001736][310 ms][DEBUG] targetPkg: running [2025-09-08 15:26:19][354747957001736][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 15:26:19][354747957001736][310 ms][DEBUG] START check_boot_completed [2025-09-08 15:26:19][354747957001736][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:26:20][354747957001736][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:26:20][354747957001736][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:26:20][354747957001736][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:26:20][354747957001736][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:26:20][354747957001736][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:26:20][354747957001736][498 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3809\nsuccessfulTxPacketsPerSecond: 0.48399489385386985\nretriedTxPackets: 868\nretriedTxPacketsPerSecond: 0.10889885111712072\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3453\nsuccessfulRxPacketsPerSecond: 0.41139565977578935\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:26:20][354747957001736][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:26:20][354747957001736][825 ms][DEBUG] SU: done in 327 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.072/192.072/192.072/0.000 ms\n [2025-09-08 15:26:20][354747957001736][825 ms][DEBUG] check_internet: online [2025-09-08 15:26:20][354747957001736][825 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:26:20][354747957001736][825 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957001736\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5106\"}'\'' -e'"" [2025-09-08 15:26:20][354747957001736][825 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:26:20][354747957001736][825 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957001736\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5106\"}'\'' -e'"" [2025-09-08 15:26:25][354747957001736][5980 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14541081-8012-491c-b797-f0f9fcdae86e","id":"QR_14541081-8012-491c-b797-f0f9fcdae86e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:26:25][354747957001736][6137 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 15:26:25][354747957001736][6137 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 15:26:25][354747957001736][6137 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:30:05][350109212181189][1 ms][INFO] === Request start === [2025-09-08 15:30:05][350109212181189][1 ms][DEBUG] START check_scloud [2025-09-08 15:30:05][350109212181189][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:30:06][350109212181189][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 6256 15610 24988112 240996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:30:06][350109212181189][286 ms][DEBUG] targetPkg: running [2025-09-08 15:30:06][350109212181189][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-08 15:30:06][350109212181189][286 ms][DEBUG] START check_boot_completed [2025-09-08 15:30:06][350109212181189][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:30:06][350109212181189][317 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:30:06][350109212181189][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:30:06][350109212181189][380 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 15:30:06][350109212181189][380 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 15:30:06][350109212181189][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:30:06][350109212181189][505 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3931\nsuccessfulTxPacketsPerSecond: 0.39807618264518363\nretriedTxPackets: 903\nretriedTxPacketsPerSecond: 0.11420218354574939\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3559\nsuccessfulRxPacketsPerSecond: 0.3458694701671267\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:30:06][350109212181189][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:30:06][350109212181189][833 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.870/227.870/227.870/0.000 ms\n [2025-09-08 15:30:06][350109212181189][833 ms][DEBUG] check_internet: online [2025-09-08 15:30:06][350109212181189][833 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:30:06][350109212181189][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350109212181189\",\"model\":\"SM-A166W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4552\"}'\'' -e'"" [2025-09-08 15:30:06][350109212181189][833 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:30:06][350109212181189][833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350109212181189\",\"model\":\"SM-A166W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4552\"}'\'' -e'"" [2025-09-08 15:30:10][350109212181189][4707 ms][DEBUG] proc_open done in 3874 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 15:30:10][350109212181189][4707 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-08 15:30:10][350109212181189][4707 ms][WARN] Detected error: Process with pid 6256 either refused to load frida-agent, or terminated during injectionProcess with pid 6256 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 15:30:10][350109212181189][4707 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 15:30:10][350109212181189][5004 ms][DEBUG] SU: done in 296 ms; outsystem 15808 15610 12717492 187252 ep_poll 0 S system_server\n [2025-09-08 15:30:10][350109212181189][5004 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 15:30:11][350109212181189][5128 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 15:30:11][350109212181189][5128 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 15:30:11][350109212181189][5128 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 15:30:11][350109212181189][5253 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 15:30:11][350109212181189][5253 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 15:30:11][350109212181189][5380 ms][DEBUG] SU: done in 127 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 15:30:13][350109212181189][7393 ms][DEBUG] START check_boot_completed [2025-09-08 15:30:13][350109212181189][7394 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:30:13][350109212181189][7440 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:30:13][350109212181189][7440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:30:13][350109212181189][7487 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:30:13][350109212181189][7487 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 15:30:16][350109212181189][10502 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 15:30:16][350109212181189][10502 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350109212181189\",\"model\":\"SM-A166W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4552\"}'\'' -e'"" [2025-09-08 15:30:22][350109212181189][16220 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e917e397-9b12-4820-949e-2d976cf5d85d","id":"QR_e917e397-9b12-4820-949e-2d976cf5d85d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:30:22][350109212181189][16376 ms][DEBUG] proc_open done in 5874 ms; code=255; res.len=3343 [2025-09-08 15:30:22][350109212181189][16376 ms][DEBUG] END runCmdUntilRes#2 in 5874 ms [2025-09-08 15:30:22][350109212181189][16376 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:30:25][350109212181189][0 ms][INFO] === Request start === [2025-09-08 15:30:25][350109212181189][1 ms][DEBUG] START check_scloud [2025-09-08 15:30:25][350109212181189][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:30:26][350109212181189][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 7780 15610 23640892 123920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:30:26][350109212181189][248 ms][DEBUG] targetPkg: running [2025-09-08 15:30:26][350109212181189][248 ms][DEBUG] END check_scloud in 247 ms [2025-09-08 15:30:26][350109212181189][248 ms][DEBUG] START check_boot_completed [2025-09-08 15:30:26][350109212181189][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:30:26][350109212181189][279 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:30:26][350109212181189][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:30:26][350109212181189][326 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:30:26][350109212181189][326 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:30:26][350109212181189][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:30:26][350109212181189][467 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3931\nsuccessfulTxPacketsPerSecond: 0.39807618264518363\nretriedTxPackets: 903\nretriedTxPacketsPerSecond: 0.11420218354574939\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3559\nsuccessfulRxPacketsPerSecond: 0.3458694701671267\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:30:26][350109212181189][467 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:30:26][350109212181189][795 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.650/189.650/189.650/0.000 ms\n [2025-09-08 15:30:26][350109212181189][795 ms][DEBUG] check_internet: online [2025-09-08 15:30:26][350109212181189][795 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:30:26][350109212181189][795 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350109212181189\",\"model\":\"SM-A166W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4063\"}'\'' -e'"" [2025-09-08 15:30:26][350109212181189][795 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:30:26][350109212181189][795 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350109212181189\",\"model\":\"SM-A166W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4063\"}'\'' -e'"" [2025-09-08 15:30:30][350109212181189][4950 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9fb44a97-8ca3-4f31-9758-760e1c62052f","id":"QR_9fb44a97-8ca3-4f31-9758-760e1c62052f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:30:30][350109212181189][5106 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-09-08 15:30:30][350109212181189][5106 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-09-08 15:30:30][350109212181189][5106 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:32:03][355814560457140][0 ms][INFO] === Request start === [2025-09-08 15:32:03][355814560457140][0 ms][DEBUG] START check_scloud [2025-09-08 15:32:03][355814560457140][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:32:04][355814560457140][298 ms][DEBUG] SU: done in 298 ms; outu0_a118 7780 15610 23728728 137172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:32:04][355814560457140][298 ms][DEBUG] targetPkg: running [2025-09-08 15:32:04][355814560457140][298 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 15:32:04][355814560457140][298 ms][DEBUG] START check_boot_completed [2025-09-08 15:32:04][355814560457140][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:32:04][355814560457140][329 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:32:04][355814560457140][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:32:04][355814560457140][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:32:04][355814560457140][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:32:04][355814560457140][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:32:04][355814560457140][485 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3931\nsuccessfulTxPacketsPerSecond: 0.39807618264518363\nretriedTxPackets: 903\nretriedTxPacketsPerSecond: 0.11420218354574939\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3559\nsuccessfulRxPacketsPerSecond: 0.3458694701671267\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:32:04][355814560457140][485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:32:05][355814560457140][1704 ms][DEBUG] SU: done in 1218 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.706/198.706/198.706/0.000 ms\n [2025-09-08 15:32:05][355814560457140][1704 ms][DEBUG] check_internet: online [2025-09-08 15:32:05][355814560457140][1704 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:32:05][355814560457140][1704 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355814560457140\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3933\"}'\'' -e'"" [2025-09-08 15:32:05][355814560457140][1704 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:32:05][355814560457140][1704 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355814560457140\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3933\"}'\'' -e'"" [2025-09-08 15:32:09][355814560457140][5625 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d56ed08-4d6c-4633-b031-599ccce5b115","id":"QR_2d56ed08-4d6c-4633-b031-599ccce5b115","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:32:09][355814560457140][5781 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-09-08 15:32:09][355814560457140][5781 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-09-08 15:32:09][355814560457140][5781 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:32:11][355814560457140][0 ms][INFO] === Request start === [2025-09-08 15:32:11][355814560457140][0 ms][DEBUG] START check_scloud [2025-09-08 15:32:11][355814560457140][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:32:12][355814560457140][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 7780 15610 23857620 148720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:32:12][355814560457140][287 ms][DEBUG] targetPkg: running [2025-09-08 15:32:12][355814560457140][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-08 15:32:12][355814560457140][287 ms][DEBUG] START check_boot_completed [2025-09-08 15:32:12][355814560457140][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:32:12][355814560457140][318 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:32:12][355814560457140][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:32:12][355814560457140][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:32:12][355814560457140][365 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:32:12][355814560457140][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:32:12][355814560457140][474 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3931\nsuccessfulTxPacketsPerSecond: 0.39807618264518363\nretriedTxPackets: 903\nretriedTxPacketsPerSecond: 0.11420218354574939\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3559\nsuccessfulRxPacketsPerSecond: 0.3458694701671267\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:32:12][355814560457140][475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:32:12][355814560457140][771 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.221/192.221/192.221/0.000 ms\n [2025-09-08 15:32:12][355814560457140][771 ms][DEBUG] check_internet: online [2025-09-08 15:32:12][355814560457140][771 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:32:12][355814560457140][771 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355814560457140\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8212\"}'\'' -e'"" [2025-09-08 15:32:12][355814560457140][772 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:32:12][355814560457140][772 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355814560457140\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8212\"}'\'' -e'"" [2025-09-08 15:32:17][355814560457140][5505 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c56d0378-86d2-4337-aa63-6e2f99e22f91","id":"QR_c56d0378-86d2-4337-aa63-6e2f99e22f91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:32:17][355814560457140][5661 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-08 15:32:17][355814560457140][5661 ms][DEBUG] END runCmdUntilRes#1 in 4890 ms [2025-09-08 15:32:17][355814560457140][5661 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:33:03][354411848333481][0 ms][INFO] === Request start === [2025-09-08 15:33:03][354411848333481][1 ms][DEBUG] START check_scloud [2025-09-08 15:33:03][354411848333481][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:33:03][354411848333481][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 7780 15610 23990832 158408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:33:03][354411848333481][260 ms][DEBUG] targetPkg: running [2025-09-08 15:33:03][354411848333481][260 ms][DEBUG] END check_scloud in 260 ms [2025-09-08 15:33:03][354411848333481][260 ms][DEBUG] START check_boot_completed [2025-09-08 15:33:03][354411848333481][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:33:03][354411848333481][307 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:33:03][354411848333481][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:33:03][354411848333481][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:33:03][354411848333481][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:33:03][354411848333481][354 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:33:03][354411848333481][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354411848333481\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1928\"}'\'' -e'"" [2025-09-08 15:33:03][354411848333481][354 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:33:03][354411848333481][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354411848333481\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1928\"}'\'' -e'"" [2025-09-08 15:33:07][354411848333481][4728 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f8682507-09f6-42b4-a137-895595a810f9","id":"QR_f8682507-09f6-42b4-a137-895595a810f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:33:07][354411848333481][4884 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-09-08 15:33:07][354411848333481][4884 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-09-08 15:33:07][354411848333481][4884 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:33:10][354411848333481][0 ms][INFO] === Request start === [2025-09-08 15:33:10][354411848333481][1 ms][DEBUG] START check_scloud [2025-09-08 15:33:10][354411848333481][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:33:10][354411848333481][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 7780 15610 24145720 126788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:33:10][354411848333481][328 ms][DEBUG] targetPkg: running [2025-09-08 15:33:10][354411848333481][328 ms][DEBUG] END check_scloud in 327 ms [2025-09-08 15:33:10][354411848333481][328 ms][DEBUG] START check_boot_completed [2025-09-08 15:33:10][354411848333481][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:33:10][354411848333481][375 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:33:10][354411848333481][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:33:10][354411848333481][453 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 15:33:10][354411848333481][453 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 15:33:10][354411848333481][453 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:33:10][354411848333481][453 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354411848333481\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9942\"}'\'' -e'"" [2025-09-08 15:33:10][354411848333481][453 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:33:10][354411848333481][453 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354411848333481\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9942\"}'\'' -e'"" [2025-09-08 15:33:15][354411848333481][5061 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b97bd3b-2862-400f-bbf3-b1a87736dfe2","id":"QR_2b97bd3b-2862-400f-bbf3-b1a87736dfe2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:33:15][354411848333481][5217 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-08 15:33:15][354411848333481][5217 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-08 15:33:15][354411848333481][5217 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:33:19][350637544354991][0 ms][INFO] === Request start === [2025-09-08 15:33:19][350637544354991][1 ms][DEBUG] START check_scloud [2025-09-08 15:33:19][350637544354991][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:33:20][350637544354991][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 7780 15610 24298560 138412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:33:20][350637544354991][324 ms][DEBUG] targetPkg: running [2025-09-08 15:33:20][350637544354991][324 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 15:33:20][350637544354991][325 ms][DEBUG] START check_boot_completed [2025-09-08 15:33:20][350637544354991][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:33:20][350637544354991][356 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:33:20][350637544354991][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:33:20][350637544354991][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:33:20][350637544354991][402 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:33:20][350637544354991][402 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:33:20][350637544354991][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544354991\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8046\"}'\'' -e'"" [2025-09-08 15:33:20][350637544354991][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:33:20][350637544354991][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544354991\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8046\"}'\'' -e'"" [2025-09-08 15:33:24][350637544354991][4901 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0dbd6d63-9bf0-46c9-a732-b4c1e3b2e423","id":"QR_0dbd6d63-9bf0-46c9-a732-b4c1e3b2e423","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:33:24][350637544354991][5057 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-09-08 15:33:24][350637544354991][5057 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-09-08 15:33:24][350637544354991][5058 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:33:27][350637544354991][0 ms][INFO] === Request start === [2025-09-08 15:33:27][350637544354991][1 ms][DEBUG] START check_scloud [2025-09-08 15:33:27][350637544354991][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:33:27][350637544354991][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 7780 15610 24412452 149748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:33:27][350637544354991][264 ms][DEBUG] targetPkg: running [2025-09-08 15:33:27][350637544354991][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-08 15:33:27][350637544354991][264 ms][DEBUG] START check_boot_completed [2025-09-08 15:33:27][350637544354991][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:33:27][350637544354991][310 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:33:27][350637544354991][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:33:27][350637544354991][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:33:27][350637544354991][357 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:33:27][350637544354991][357 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:33:27][350637544354991][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544354991\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6185\"}'\'' -e'"" [2025-09-08 15:33:27][350637544354991][357 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:33:27][350637544354991][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544354991\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6185\"}'\'' -e'"" [2025-09-08 15:33:32][350637544354991][5231 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd63983c-2b72-4481-b479-b7c0a9c11486","id":"QR_fd63983c-2b72-4481-b479-b7c0a9c11486","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:33:32][350637544354991][5387 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-08 15:33:32][350637544354991][5387 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-08 15:33:32][350637544354991][5388 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:34:05][357713086984686][0 ms][INFO] === Request start === [2025-09-08 15:34:05][357713086984686][1 ms][DEBUG] START check_scloud [2025-09-08 15:34:05][357713086984686][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:34:05][357713086984686][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 7780 15610 24530368 163008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:34:05][357713086984686][317 ms][DEBUG] targetPkg: running [2025-09-08 15:34:05][357713086984686][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 15:34:05][357713086984686][317 ms][DEBUG] START check_boot_completed [2025-09-08 15:34:05][357713086984686][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:34:05][357713086984686][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:34:05][357713086984686][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:34:05][357713086984686][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:34:05][357713086984686][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:34:05][357713086984686][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:34:05][357713086984686][535 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4073\nsuccessfulTxPacketsPerSecond: 0.6182676315124916\nretriedTxPackets: 942\nretriedTxPacketsPerSecond: 0.1698058987956843\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3685\nsuccessfulRxPacketsPerSecond: 0.5486036730322109\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:34:05][357713086984686][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:34:06][357713086984686][848 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=207 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 207.962/207.962/207.962/0.000 ms\n [2025-09-08 15:34:06][357713086984686][848 ms][DEBUG] check_internet: online [2025-09-08 15:34:06][357713086984686][848 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:34:06][357713086984686][848 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357713086984686\",\"model\":\"SM-G610M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"IUS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1940\"}'\'' -e'"" [2025-09-08 15:34:06][357713086984686][848 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:34:06][357713086984686][848 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357713086984686\",\"model\":\"SM-G610M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"IUS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1940\"}'\'' -e'"" [2025-09-08 15:34:10][357713086984686][5487 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3fc4ad19-ca09-4922-9faa-9ca37eee7ce4","id":"QR_3fc4ad19-ca09-4922-9faa-9ca37eee7ce4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:34:10][357713086984686][5643 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 15:34:10][357713086984686][5643 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 15:34:10][357713086984686][5643 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:34:14][357713086984686][1 ms][INFO] === Request start === [2025-09-08 15:34:14][357713086984686][1 ms][DEBUG] START check_scloud [2025-09-08 15:34:14][357713086984686][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:34:14][357713086984686][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 7780 15610 24659584 172380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:34:14][357713086984686][302 ms][DEBUG] targetPkg: running [2025-09-08 15:34:14][357713086984686][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 15:34:14][357713086984686][302 ms][DEBUG] START check_boot_completed [2025-09-08 15:34:14][357713086984686][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:34:14][357713086984686][349 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:34:14][357713086984686][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:34:14][357713086984686][443 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 15:34:14][357713086984686][443 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 15:34:14][357713086984686][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:34:14][357713086984686][584 ms][DEBUG] SU: done in 142 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4073\nsuccessfulTxPacketsPerSecond: 0.6182676315124916\nretriedTxPackets: 942\nretriedTxPacketsPerSecond: 0.1698058987956843\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3685\nsuccessfulRxPacketsPerSecond: 0.5486036730322109\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:34:14][357713086984686][585 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:34:15][357713086984686][974 ms][DEBUG] SU: done in 389 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.812/261.812/261.812/0.000 ms\n [2025-09-08 15:34:15][357713086984686][974 ms][DEBUG] check_internet: online [2025-09-08 15:34:15][357713086984686][974 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:34:15][357713086984686][974 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357713086984686\",\"model\":\"SM-G610M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"IUS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1626\"}'\'' -e'"" [2025-09-08 15:34:15][357713086984686][974 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:34:15][357713086984686][974 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357713086984686\",\"model\":\"SM-G610M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"IUS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1626\"}'\'' -e'"" [2025-09-08 15:34:18][357713086984686][4410 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8e50df7-a583-40cf-ae55-94c18e920bbd","id":"QR_e8e50df7-a583-40cf-ae55-94c18e920bbd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:34:18][357713086984686][4566 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-08 15:34:18][357713086984686][4566 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-09-08 15:34:18][357713086984686][4567 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:35:04][352001416813147][0 ms][INFO] === Request start === [2025-09-08 15:35:04][352001416813147][1 ms][DEBUG] START check_scloud [2025-09-08 15:35:04][352001416813147][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:35:04][352001416813147][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 7780 15610 24814400 184400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:35:04][352001416813147][269 ms][DEBUG] targetPkg: running [2025-09-08 15:35:04][352001416813147][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-08 15:35:04][352001416813147][269 ms][DEBUG] START check_boot_completed [2025-09-08 15:35:04][352001416813147][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:35:04][352001416813147][316 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:35:04][352001416813147][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:35:04][352001416813147][378 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 15:35:04][352001416813147][378 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 15:35:04][352001416813147][378 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:35:04][352001416813147][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001416813147\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2115\"}'\'' -e'"" [2025-09-08 15:35:04][352001416813147][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:35:04][352001416813147][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001416813147\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2115\"}'\'' -e'"" [2025-09-08 15:35:08][352001416813147][4955 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de0b6cf5-0ed5-44a8-af51-037d1a6ed090","id":"QR_de0b6cf5-0ed5-44a8-af51-037d1a6ed090","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:35:09][352001416813147][5111 ms][DEBUG] proc_open done in 4732 ms; code=255; res.len=3343 [2025-09-08 15:35:09][352001416813147][5111 ms][DEBUG] END runCmdUntilRes#1 in 4732 ms [2025-09-08 15:35:09][352001416813147][5111 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:35:11][352001416813147][0 ms][INFO] === Request start === [2025-09-08 15:35:11][352001416813147][1 ms][DEBUG] START check_scloud [2025-09-08 15:35:11][352001416813147][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:35:11][352001416813147][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 7780 15610 24975308 195268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:35:11][352001416813147][308 ms][DEBUG] targetPkg: running [2025-09-08 15:35:11][352001416813147][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 15:35:11][352001416813147][308 ms][DEBUG] START check_boot_completed [2025-09-08 15:35:11][352001416813147][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:35:11][352001416813147][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:35:11][352001416813147][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:35:11][352001416813147][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:35:11][352001416813147][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:35:11][352001416813147][401 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:35:11][352001416813147][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001416813147\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2439\"}'\'' -e'"" [2025-09-08 15:35:11][352001416813147][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:35:11][352001416813147][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001416813147\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2439\"}'\'' -e'"" [2025-09-08 15:35:16][352001416813147][4478 ms][DEBUG] proc_open done in 4077 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 15:35:16][352001416813147][4478 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-09-08 15:35:16][352001416813147][4478 ms][WARN] Detected error: Process with pid 7780 either refused to load frida-agent, or terminated during injectionProcess with pid 7780 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 15:35:16][352001416813147][4479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 15:35:16][352001416813147][4791 ms][DEBUG] SU: done in 312 ms; outsystem 15808 15610 12697276 204852 ep_poll 0 S system_server\n [2025-09-08 15:35:16][352001416813147][4791 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 15:35:16][352001416813147][4931 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 15:35:16][352001416813147][4931 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 15:35:16][352001416813147][4931 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 15:35:16][352001416813147][5056 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 15:35:16][352001416813147][5057 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 15:35:16][352001416813147][5229 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 15:35:18][352001416813147][7243 ms][DEBUG] START check_boot_completed [2025-09-08 15:35:18][352001416813147][7243 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:35:18][352001416813147][7290 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:35:18][352001416813147][7290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:35:18][352001416813147][7337 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:35:18][352001416813147][7337 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 15:35:21][352001416813147][10352 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 15:35:21][352001416813147][10352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001416813147\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2439\"}'\'' -e'"" [2025-09-08 15:35:26][352001416813147][15413 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c91a5467-55b9-4565-a68a-4364273e460b","id":"QR_c91a5467-55b9-4565-a68a-4364273e460b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:35:27][352001416813147][15569 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-08 15:35:27][352001416813147][15569 ms][DEBUG] END runCmdUntilRes#2 in 5218 ms [2025-09-08 15:35:27][352001416813147][15570 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:37:03][350572361866308][1 ms][INFO] === Request start === [2025-09-08 15:37:03][350572361866308][1 ms][DEBUG] START check_scloud [2025-09-08 15:37:03][350572361866308][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:37:03][350572361866308][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 9953 15610 23595480 126904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:37:03][350572361866308][297 ms][DEBUG] targetPkg: running [2025-09-08 15:37:03][350572361866308][297 ms][DEBUG] END check_scloud in 295 ms [2025-09-08 15:37:03][350572361866308][297 ms][DEBUG] START check_boot_completed [2025-09-08 15:37:03][350572361866308][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:37:03][350572361866308][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:37:03][350572361866308][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:37:03][350572361866308][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:37:03][350572361866308][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:37:03][350572361866308][375 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:37:03][350572361866308][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572361866308\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6487\"}'\'' -e'"" [2025-09-08 15:37:03][350572361866308][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:37:03][350572361866308][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572361866308\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6487\"}'\'' -e'"" [2025-09-08 15:37:08][350572361866308][5092 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ddf08a33-09b0-48eb-9764-7466d29db5dd","id":"QR_ddf08a33-09b0-48eb-9764-7466d29db5dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:37:08][350572361866308][5248 ms][DEBUG] proc_open done in 4874 ms; code=255; res.len=3343 [2025-09-08 15:37:08][350572361866308][5248 ms][DEBUG] END runCmdUntilRes#1 in 4874 ms [2025-09-08 15:37:08][350572361866308][5248 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:37:10][350572361866308][0 ms][INFO] === Request start === [2025-09-08 15:37:10][350572361866308][1 ms][DEBUG] START check_scloud [2025-09-08 15:37:10][350572361866308][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:37:11][350572361866308][261 ms][DEBUG] SU: done in 261 ms; outu0_a118 9953 15610 23738016 137724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:37:11][350572361866308][261 ms][DEBUG] targetPkg: running [2025-09-08 15:37:11][350572361866308][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-08 15:37:11][350572361866308][262 ms][DEBUG] START check_boot_completed [2025-09-08 15:37:11][350572361866308][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:37:11][350572361866308][308 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:37:11][350572361866308][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:37:11][350572361866308][355 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:37:11][350572361866308][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:37:11][350572361866308][355 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:37:11][350572361866308][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572361866308\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8620\"}'\'' -e'"" [2025-09-08 15:37:11][350572361866308][355 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:37:11][350572361866308][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572361866308\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8620\"}'\'' -e'"" [2025-09-08 15:37:16][350572361866308][5369 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_189e9fae-92da-47f4-9020-c615343058ff","id":"QR_189e9fae-92da-47f4-9020-c615343058ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:37:16][350572361866308][5526 ms][DEBUG] proc_open done in 5171 ms; code=255; res.len=3343 [2025-09-08 15:37:16][350572361866308][5526 ms][DEBUG] END runCmdUntilRes#1 in 5171 ms [2025-09-08 15:37:16][350572361866308][5526 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:39:03][355241321901994][0 ms][INFO] === Request start === [2025-09-08 15:39:03][355241321901994][1 ms][DEBUG] START check_scloud [2025-09-08 15:39:03][355241321901994][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:39:03][355241321901994][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 9953 15610 23809748 149824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:39:03][355241321901994][277 ms][DEBUG] targetPkg: running [2025-09-08 15:39:03][355241321901994][277 ms][DEBUG] END check_scloud in 276 ms [2025-09-08 15:39:03][355241321901994][277 ms][DEBUG] START check_boot_completed [2025-09-08 15:39:03][355241321901994][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:39:03][355241321901994][324 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:39:03][355241321901994][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:39:04][355241321901994][371 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:39:04][355241321901994][371 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:39:04][355241321901994][371 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:39:04][355241321901994][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241321901994\",\"model\":\"SM-G556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2728\"}'\'' -e'"" [2025-09-08 15:39:04][355241321901994][371 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:39:04][355241321901994][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241321901994\",\"model\":\"SM-G556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2728\"}'\'' -e'"" [2025-09-08 15:39:09][355241321901994][5463 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f9b7bc69-f47e-4796-b5be-dff570c711d4","id":"QR_f9b7bc69-f47e-4796-b5be-dff570c711d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:39:09][355241321901994][5619 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-09-08 15:39:09][355241321901994][5619 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-09-08 15:39:09][355241321901994][5620 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:39:11][355241321901994][1 ms][INFO] === Request start === [2025-09-08 15:39:11][355241321901994][1 ms][DEBUG] START check_scloud [2025-09-08 15:39:11][355241321901994][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:39:11][355241321901994][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 9953 15610 23982940 160996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:39:11][355241321901994][295 ms][DEBUG] targetPkg: running [2025-09-08 15:39:11][355241321901994][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-08 15:39:11][355241321901994][295 ms][DEBUG] START check_boot_completed [2025-09-08 15:39:11][355241321901994][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:39:12][355241321901994][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:39:12][355241321901994][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:39:12][355241321901994][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:39:12][355241321901994][389 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 15:39:12][355241321901994][389 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:39:12][355241321901994][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241321901994\",\"model\":\"SM-G556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7917\"}'\'' -e'"" [2025-09-08 15:39:12][355241321901994][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:39:12][355241321901994][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241321901994\",\"model\":\"SM-G556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7917\"}'\'' -e'"" [2025-09-08 15:39:16][355241321901994][5044 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25acea62-8a2c-4fce-8621-8929900c14d1","id":"QR_25acea62-8a2c-4fce-8621-8929900c14d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:39:16][355241321901994][5200 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-08 15:39:16][355241321901994][5200 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-08 15:39:16][355241321901994][5200 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:43:03][350588938451564][1 ms][INFO] === Request start === [2025-09-08 15:43:03][350588938451564][1 ms][DEBUG] START check_scloud [2025-09-08 15:43:03][350588938451564][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:43:03][350588938451564][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 9953 15610 24092700 172504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:43:03][350588938451564][311 ms][DEBUG] targetPkg: running [2025-09-08 15:43:03][350588938451564][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 15:43:03][350588938451564][311 ms][DEBUG] START check_boot_completed [2025-09-08 15:43:03][350588938451564][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:43:03][350588938451564][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:43:03][350588938451564][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:43:03][350588938451564][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:43:03][350588938451564][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:43:03][350588938451564][389 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:43:03][350588938451564][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350588938451564\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3076\"}'\'' -e'"" [2025-09-08 15:43:03][350588938451564][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:43:03][350588938451564][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350588938451564\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3076\"}'\'' -e'"" [2025-09-08 15:43:08][350588938451564][5310 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_709739f4-f540-491b-ab5e-352f2d7967f1","id":"QR_709739f4-f540-491b-ab5e-352f2d7967f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:43:08][350588938451564][5466 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-09-08 15:43:08][350588938451564][5466 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-08 15:43:08][350588938451564][5466 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:43:11][350588938451564][0 ms][INFO] === Request start === [2025-09-08 15:43:11][350588938451564][1 ms][DEBUG] START check_scloud [2025-09-08 15:43:11][350588938451564][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:43:11][350588938451564][296 ms][DEBUG] SU: done in 296 ms; outu0_a118 9953 15610 24251684 184212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:43:11][350588938451564][297 ms][DEBUG] targetPkg: running [2025-09-08 15:43:11][350588938451564][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-08 15:43:11][350588938451564][297 ms][DEBUG] START check_boot_completed [2025-09-08 15:43:11][350588938451564][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:43:11][350588938451564][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:43:11][350588938451564][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:43:11][350588938451564][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:43:11][350588938451564][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:43:11][350588938451564][374 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:43:11][350588938451564][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350588938451564\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3900\"}'\'' -e'"" [2025-09-08 15:43:11][350588938451564][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:43:11][350588938451564][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350588938451564\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3900\"}'\'' -e'"" [2025-09-08 15:43:16][350588938451564][5295 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7aed0a98-79aa-4aff-9773-81a3cae9fbb4","id":"QR_7aed0a98-79aa-4aff-9773-81a3cae9fbb4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:43:16][350588938451564][5451 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-09-08 15:43:16][350588938451564][5451 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-08 15:43:16][350588938451564][5452 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:43:22][354149405039881][0 ms][INFO] === Request start === [2025-09-08 15:43:22][354149405039881][1 ms][DEBUG] START check_scloud [2025-09-08 15:43:22][354149405039881][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:43:22][354149405039881][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 9953 15610 24408620 195120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:43:22][354149405039881][268 ms][DEBUG] targetPkg: running [2025-09-08 15:43:22][354149405039881][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-08 15:43:22][354149405039881][268 ms][DEBUG] START check_boot_completed [2025-09-08 15:43:22][354149405039881][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:43:22][354149405039881][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:43:22][354149405039881][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:43:22][354149405039881][363 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 15:43:22][354149405039881][363 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 15:43:22][354149405039881][363 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:43:22][354149405039881][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354149405039881\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4466\"}'\'' -e'"" [2025-09-08 15:43:22][354149405039881][363 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:43:22][354149405039881][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354149405039881\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4466\"}'\'' -e'"" [2025-09-08 15:43:26][354149405039881][4798 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_658f1240-34b8-4f62-930c-a3289e4e6cef","id":"QR_658f1240-34b8-4f62-930c-a3289e4e6cef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:43:27][354149405039881][4954 ms][DEBUG] proc_open done in 4591 ms; code=255; res.len=3343 [2025-09-08 15:43:27][354149405039881][4954 ms][DEBUG] END runCmdUntilRes#1 in 4591 ms [2025-09-08 15:43:27][354149405039881][4954 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:43:30][354149405039881][0 ms][INFO] === Request start === [2025-09-08 15:43:30][354149405039881][1 ms][DEBUG] START check_scloud [2025-09-08 15:43:30][354149405039881][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:43:30][354149405039881][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 9953 15610 24547088 207132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:43:30][354149405039881][282 ms][DEBUG] targetPkg: running [2025-09-08 15:43:30][354149405039881][282 ms][DEBUG] END check_scloud in 282 ms [2025-09-08 15:43:30][354149405039881][282 ms][DEBUG] START check_boot_completed [2025-09-08 15:43:30][354149405039881][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:43:30][354149405039881][329 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:43:30][354149405039881][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:43:31][354149405039881][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:43:31][354149405039881][376 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:43:31][354149405039881][376 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:43:31][354149405039881][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354149405039881\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7258\"}'\'' -e'"" [2025-09-08 15:43:31][354149405039881][376 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:43:31][354149405039881][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354149405039881\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7258\"}'\'' -e'"" [2025-09-08 15:43:35][354149405039881][4672 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14825992-24e3-49d4-bc27-8db3ee9f1ddd","id":"QR_14825992-24e3-49d4-bc27-8db3ee9f1ddd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:43:35][354149405039881][4828 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-09-08 15:43:35][354149405039881][4828 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-09-08 15:43:35][354149405039881][4828 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:46:04][350482803496328][1 ms][INFO] === Request start === [2025-09-08 15:46:04][350482803496328][1 ms][DEBUG] START check_scloud [2025-09-08 15:46:04][350482803496328][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:46:04][350482803496328][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 9953 15610 24677164 218556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:46:04][350482803496328][300 ms][DEBUG] targetPkg: running [2025-09-08 15:46:04][350482803496328][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 15:46:04][350482803496328][300 ms][DEBUG] START check_boot_completed [2025-09-08 15:46:04][350482803496328][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:46:04][350482803496328][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:46:04][350482803496328][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:46:04][350482803496328][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:46:04][350482803496328][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:46:04][350482803496328][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:46:04][350482803496328][488 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4531\nsuccessfulTxPacketsPerSecond: 0.4186992410245504\nretriedTxPackets: 1059\nretriedTxPacketsPerSecond: 0.09304427578323342\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4077\nsuccessfulRxPacketsPerSecond: 0.3788231228317361\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:46:04][350482803496328][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:46:05][350482803496328][1753 ms][DEBUG] SU: done in 1265 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.563/203.563/203.563/0.000 ms\n [2025-09-08 15:46:05][350482803496328][1753 ms][DEBUG] check_internet: online [2025-09-08 15:46:05][350482803496328][1753 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:46:05][350482803496328][1753 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482803496328\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2826\"}'\'' -e'"" [2025-09-08 15:46:05][350482803496328][1753 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:46:05][350482803496328][1754 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482803496328\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2826\"}'\'' -e'"" [2025-09-08 15:46:10][350482803496328][6392 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91e42d3f-4938-4746-b8b3-8217ba9c1ab6","id":"QR_91e42d3f-4938-4746-b8b3-8217ba9c1ab6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:46:10][350482803496328][6549 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 15:46:10][350482803496328][6549 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 15:46:10][350482803496328][6549 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:46:13][350482803496328][0 ms][INFO] === Request start === [2025-09-08 15:46:13][350482803496328][1 ms][DEBUG] START check_scloud [2025-09-08 15:46:13][350482803496328][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:46:13][350482803496328][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 9953 15610 24844212 230336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:46:13][350482803496328][313 ms][DEBUG] targetPkg: running [2025-09-08 15:46:13][350482803496328][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 15:46:13][350482803496328][313 ms][DEBUG] START check_boot_completed [2025-09-08 15:46:13][350482803496328][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:46:13][350482803496328][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:46:13][350482803496328][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:46:13][350482803496328][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:46:13][350482803496328][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:46:13][350482803496328][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:46:13][350482803496328][516 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4531\nsuccessfulTxPacketsPerSecond: 0.4186992410245504\nretriedTxPackets: 1059\nretriedTxPacketsPerSecond: 0.09304427578323342\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4077\nsuccessfulRxPacketsPerSecond: 0.3788231228317361\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:46:13][350482803496328][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:46:13][350482803496328][828 ms][DEBUG] SU: done in 313 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.427/220.427/220.427/0.000 ms\n [2025-09-08 15:46:13][350482803496328][828 ms][DEBUG] check_internet: online [2025-09-08 15:46:13][350482803496328][828 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:46:13][350482803496328][828 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482803496328\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3745\"}'\'' -e'"" [2025-09-08 15:46:13][350482803496328][829 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:46:13][350482803496328][829 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482803496328\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3745\"}'\'' -e'"" [2025-09-08 15:46:19][350482803496328][6092 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff5367fa-00df-4dd2-8df8-5ef743b7be9f","id":"QR_ff5367fa-00df-4dd2-8df8-5ef743b7be9f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:46:19][350482803496328][6249 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-08 15:46:19][350482803496328][6249 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-08 15:46:19][350482803496328][6249 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:47:03][358184576017941][0 ms][INFO] === Request start === [2025-09-08 15:47:03][358184576017941][1 ms][DEBUG] START check_scloud [2025-09-08 15:47:03][358184576017941][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:47:04][358184576017941][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 9953 15610 24974452 240964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:47:04][358184576017941][318 ms][DEBUG] targetPkg: running [2025-09-08 15:47:04][358184576017941][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 15:47:04][358184576017941][318 ms][DEBUG] START check_boot_completed [2025-09-08 15:47:04][358184576017941][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:47:04][358184576017941][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:47:04][358184576017941][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:47:04][358184576017941][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:47:04][358184576017941][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:47:04][358184576017941][411 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:47:04][358184576017941][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184576017941\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6969\"}'\'' -e'"" [2025-09-08 15:47:04][358184576017941][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:47:04][358184576017941][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184576017941\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6969\"}'\'' -e'"" [2025-09-08 15:47:08][358184576017941][4160 ms][DEBUG] proc_open done in 3749 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 15:47:08][358184576017941][4160 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-08 15:47:08][358184576017941][4160 ms][WARN] Detected error: Process with pid 9953 either refused to load frida-agent, or terminated during injectionProcess with pid 9953 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 15:47:08][358184576017941][4160 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 15:47:08][358184576017941][4426 ms][DEBUG] SU: done in 266 ms; outsystem 15808 15610 12697276 195388 ep_poll 0 S system_server\n [2025-09-08 15:47:08][358184576017941][4426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 15:47:08][358184576017941][4566 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 15:47:08][358184576017941][4566 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 15:47:08][358184576017941][4567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 15:47:08][358184576017941][4692 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 15:47:08][358184576017941][4692 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 15:47:08][358184576017941][4863 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 15:47:10][358184576017941][6878 ms][DEBUG] START check_boot_completed [2025-09-08 15:47:10][358184576017941][6878 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:47:10][358184576017941][6925 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:47:10][358184576017941][6926 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:47:10][358184576017941][6988 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 15:47:10][358184576017941][6988 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 15:47:13][358184576017941][10003 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 15:47:13][358184576017941][10003 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184576017941\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6969\"}'\'' -e'"" [2025-09-08 15:47:18][358184576017941][14580 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c0c1eb4-4043-4e0f-80c2-cb1cebc7a54b","id":"QR_9c0c1eb4-4043-4e0f-80c2-cb1cebc7a54b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:47:18][358184576017941][14736 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-08 15:47:18][358184576017941][14736 ms][DEBUG] END runCmdUntilRes#2 in 4733 ms [2025-09-08 15:47:18][358184576017941][14736 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:47:20][358184576017941][0 ms][INFO] === Request start === [2025-09-08 15:47:20][358184576017941][1 ms][DEBUG] START check_scloud [2025-09-08 15:47:20][358184576017941][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:47:21][358184576017941][247 ms][DEBUG] SU: done in 247 ms; outu0_a118 11262 15610 23666400 123576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:47:21][358184576017941][248 ms][DEBUG] targetPkg: running [2025-09-08 15:47:21][358184576017941][248 ms][DEBUG] END check_scloud in 247 ms [2025-09-08 15:47:21][358184576017941][248 ms][DEBUG] START check_boot_completed [2025-09-08 15:47:21][358184576017941][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:47:21][358184576017941][294 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:47:21][358184576017941][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:47:21][358184576017941][372 ms][DEBUG] SU: done in 77 ms; out [2025-09-08 15:47:21][358184576017941][372 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-08 15:47:21][358184576017941][372 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:47:21][358184576017941][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184576017941\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5813\"}'\'' -e'"" [2025-09-08 15:47:21][358184576017941][372 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:47:21][358184576017941][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184576017941\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5813\"}'\'' -e'"" [2025-09-08 15:47:25][358184576017941][4981 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a273848a-1cbd-4fa7-af94-45346bb26019","id":"QR_a273848a-1cbd-4fa7-af94-45346bb26019","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:47:26][358184576017941][5137 ms][DEBUG] proc_open done in 4765 ms; code=255; res.len=3343 [2025-09-08 15:47:26][358184576017941][5137 ms][DEBUG] END runCmdUntilRes#1 in 4765 ms [2025-09-08 15:47:26][358184576017941][5137 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:47:31][350824194705405][0 ms][INFO] === Request start === [2025-09-08 15:47:31][350824194705405][1 ms][DEBUG] START check_scloud [2025-09-08 15:47:31][350824194705405][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:47:31][350824194705405][243 ms][DEBUG] SU: done in 242 ms; outu0_a118 11262 15610 23870352 136988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:47:31][350824194705405][243 ms][DEBUG] targetPkg: running [2025-09-08 15:47:31][350824194705405][243 ms][DEBUG] END check_scloud in 242 ms [2025-09-08 15:47:31][350824194705405][243 ms][DEBUG] START check_boot_completed [2025-09-08 15:47:31][350824194705405][243 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:47:31][350824194705405][290 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:47:31][350824194705405][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:47:31][350824194705405][352 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 15:47:31][350824194705405][352 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 15:47:31][350824194705405][352 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:47:31][350824194705405][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824194705405\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3489\"}'\'' -e'"" [2025-09-08 15:47:31][350824194705405][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:47:31][350824194705405][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824194705405\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3489\"}'\'' -e'"" [2025-09-08 15:47:36][350824194705405][5179 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57345c11-fb37-49e1-9fdf-f24b89bde215","id":"QR_57345c11-fb37-49e1-9fdf-f24b89bde215","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:47:36][350824194705405][5335 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3343 [2025-09-08 15:47:36][350824194705405][5335 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-09-08 15:47:36][350824194705405][5335 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:47:40][350824194705405][0 ms][INFO] === Request start === [2025-09-08 15:47:40][350824194705405][1 ms][DEBUG] START check_scloud [2025-09-08 15:47:40][350824194705405][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:47:40][350824194705405][281 ms][DEBUG] SU: done in 281 ms; outu0_a118 11262 15610 23948868 149068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:47:40][350824194705405][282 ms][DEBUG] targetPkg: running [2025-09-08 15:47:40][350824194705405][282 ms][DEBUG] END check_scloud in 281 ms [2025-09-08 15:47:40][350824194705405][282 ms][DEBUG] START check_boot_completed [2025-09-08 15:47:40][350824194705405][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:47:40][350824194705405][328 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:47:40][350824194705405][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:47:40][350824194705405][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:47:40][350824194705405][375 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:47:40][350824194705405][375 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:47:40][350824194705405][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824194705405\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9060\"}'\'' -e'"" [2025-09-08 15:47:40][350824194705405][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:47:40][350824194705405][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824194705405\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9060\"}'\'' -e'"" [2025-09-08 15:47:43][350824194705405][3687 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92688396-adea-457f-b0db-728a8008a627","id":"QR_92688396-adea-457f-b0db-728a8008a627","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:47:44][350824194705405][3843 ms][DEBUG] proc_open done in 3468 ms; code=255; res.len=3343 [2025-09-08 15:47:44][350824194705405][3843 ms][DEBUG] END runCmdUntilRes#1 in 3468 ms [2025-09-08 15:47:44][350824194705405][3843 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:48:03][352397457541237][0 ms][INFO] === Request start === [2025-09-08 15:48:03][352397457541237][1 ms][DEBUG] START check_scloud [2025-09-08 15:48:03][352397457541237][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:48:03][352397457541237][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 11262 15610 24074848 160248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:48:03][352397457541237][290 ms][DEBUG] targetPkg: running [2025-09-08 15:48:03][352397457541237][290 ms][DEBUG] END check_scloud in 290 ms [2025-09-08 15:48:03][352397457541237][290 ms][DEBUG] START check_boot_completed [2025-09-08 15:48:03][352397457541237][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:48:03][352397457541237][337 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:48:03][352397457541237][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:48:03][352397457541237][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:48:03][352397457541237][384 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:48:03][352397457541237][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:48:03][352397457541237][494 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4810\nsuccessfulTxPacketsPerSecond: 0.9264793783622236\nretriedTxPackets: 1127\nretriedTxPacketsPerSecond: 0.22580859400943082\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4317\nsuccessfulRxPacketsPerSecond: 0.7969715082685794\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:48:03][352397457541237][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:48:04][352397457541237][868 ms][DEBUG] SU: done in 374 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.720/261.720/261.720/0.000 ms\n [2025-09-08 15:48:04][352397457541237][868 ms][DEBUG] check_internet: online [2025-09-08 15:48:04][352397457541237][868 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:48:04][352397457541237][868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457541237\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3796\"}'\'' -e'"" [2025-09-08 15:48:04][352397457541237][868 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:48:04][352397457541237][868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457541237\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3796\"}'\'' -e'"" [2025-09-08 15:48:07][352397457541237][4414 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f647766-7e6d-4574-b6ae-d03383ffcafe","id":"QR_9f647766-7e6d-4574-b6ae-d03383ffcafe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:48:07][352397457541237][4570 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-08 15:48:07][352397457541237][4570 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-08 15:48:07][352397457541237][4570 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:48:10][352397457541237][1 ms][INFO] === Request start === [2025-09-08 15:48:10][352397457541237][1 ms][DEBUG] START check_scloud [2025-09-08 15:48:10][352397457541237][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:48:10][352397457541237][296 ms][DEBUG] SU: done in 294 ms; outu0_a118 11262 15610 24224672 171564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:48:10][352397457541237][296 ms][DEBUG] targetPkg: running [2025-09-08 15:48:10][352397457541237][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-08 15:48:10][352397457541237][296 ms][DEBUG] START check_boot_completed [2025-09-08 15:48:10][352397457541237][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:48:10][352397457541237][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:48:10][352397457541237][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:48:10][352397457541237][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:48:10][352397457541237][389 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:48:10][352397457541237][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:48:10][352397457541237][499 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4810\nsuccessfulTxPacketsPerSecond: 0.9264793783622236\nretriedTxPackets: 1127\nretriedTxPacketsPerSecond: 0.22580859400943082\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4317\nsuccessfulRxPacketsPerSecond: 0.7969715082685794\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:48:10][352397457541237][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:48:10][352397457541237][827 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=212 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 212.998/212.998/212.998/0.000 ms\n [2025-09-08 15:48:10][352397457541237][827 ms][DEBUG] check_internet: online [2025-09-08 15:48:10][352397457541237][827 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:48:10][352397457541237][827 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457541237\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3340\"}'\'' -e'"" [2025-09-08 15:48:10][352397457541237][827 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:48:10][352397457541237][827 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457541237\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3340\"}'\'' -e'"" [2025-09-08 15:48:15][352397457541237][5466 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4697a64-a188-48ce-b0be-3b50cd467798","id":"QR_e4697a64-a188-48ce-b0be-3b50cd467798","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:48:15][352397457541237][5622 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 15:48:15][352397457541237][5622 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 15:48:15][352397457541237][5622 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:52:04][353744501230367][1 ms][INFO] === Request start === [2025-09-08 15:52:04][353744501230367][1 ms][DEBUG] START check_scloud [2025-09-08 15:52:04][353744501230367][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:52:04][353744501230367][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 11262 15610 24334064 182880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:52:04][353744501230367][310 ms][DEBUG] targetPkg: running [2025-09-08 15:52:04][353744501230367][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 15:52:04][353744501230367][310 ms][DEBUG] START check_boot_completed [2025-09-08 15:52:04][353744501230367][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:52:04][353744501230367][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:52:04][353744501230367][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:52:04][353744501230367][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:52:04][353744501230367][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:52:04][353744501230367][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:52:04][353744501230367][498 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4877\nsuccessfulTxPacketsPerSecond: 0.6330309901738475\nretriedTxPackets: 1142\nretriedTxPacketsPerSecond: 0.14172335600907035\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4377\nsuccessfulRxPacketsPerSecond: 0.5668934240362813\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:52:04][353744501230367][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:52:06][353744501230367][2060 ms][DEBUG] SU: done in 1562 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.031/204.031/204.031/0.000 ms\n [2025-09-08 15:52:06][353744501230367][2060 ms][DEBUG] check_internet: online [2025-09-08 15:52:06][353744501230367][2060 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:52:06][353744501230367][2060 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353744501230367\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1991\"}'\'' -e'"" [2025-09-08 15:52:06][353744501230367][2060 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:52:06][353744501230367][2060 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353744501230367\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1991\"}'\'' -e'"" [2025-09-08 15:52:10][353744501230367][5934 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe612be9-97c2-4218-9c2a-651fae3bdd7d","id":"QR_fe612be9-97c2-4218-9c2a-651fae3bdd7d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:52:10][353744501230367][6090 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-08 15:52:10][353744501230367][6090 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-08 15:52:10][353744501230367][6091 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:52:12][353744501230367][0 ms][INFO] === Request start === [2025-09-08 15:52:12][353744501230367][1 ms][DEBUG] START check_scloud [2025-09-08 15:52:12][353744501230367][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:52:12][353744501230367][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 11262 15610 24468344 193640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:52:12][353744501230367][287 ms][DEBUG] targetPkg: running [2025-09-08 15:52:12][353744501230367][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-08 15:52:12][353744501230367][287 ms][DEBUG] START check_boot_completed [2025-09-08 15:52:12][353744501230367][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:52:13][353744501230367][332 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 15:52:13][353744501230367][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:52:13][353744501230367][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:52:13][353744501230367][379 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 15:52:13][353744501230367][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:52:13][353744501230367][489 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4877\nsuccessfulTxPacketsPerSecond: 0.6330309901738475\nretriedTxPackets: 1142\nretriedTxPacketsPerSecond: 0.14172335600907035\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4377\nsuccessfulRxPacketsPerSecond: 0.5668934240362813\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:52:13][353744501230367][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:52:13][353744501230367][801 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.977/192.977/192.977/0.000 ms\n [2025-09-08 15:52:13][353744501230367][801 ms][DEBUG] check_internet: online [2025-09-08 15:52:13][353744501230367][801 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:52:13][353744501230367][801 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353744501230367\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2446\"}'\'' -e'"" [2025-09-08 15:52:13][353744501230367][801 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:52:13][353744501230367][802 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353744501230367\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2446\"}'\'' -e'"" [2025-09-08 15:52:18][353744501230367][5862 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f270be87-564d-4328-8a46-27b3496497a3","id":"QR_f270be87-564d-4328-8a46-27b3496497a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:52:18][353744501230367][6018 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-08 15:52:18][353744501230367][6018 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-08 15:52:18][353744501230367][6018 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:53:03][350226692300566][0 ms][INFO] === Request start === [2025-09-08 15:53:03][350226692300566][1 ms][DEBUG] START check_scloud [2025-09-08 15:53:03][350226692300566][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:53:03][350226692300566][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 11262 15610 24606776 205944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:53:03][350226692300566][310 ms][DEBUG] targetPkg: running [2025-09-08 15:53:03][350226692300566][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 15:53:03][350226692300566][310 ms][DEBUG] START check_boot_completed [2025-09-08 15:53:03][350226692300566][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:53:03][350226692300566][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:53:03][350226692300566][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:53:03][350226692300566][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:53:03][350226692300566][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 15:53:03][350226692300566][388 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:53:03][350226692300566][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226692300566\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7902\"}'\'' -e'"" [2025-09-08 15:53:03][350226692300566][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:53:03][350226692300566][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226692300566\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7902\"}'\'' -e'"" [2025-09-08 15:53:06][350226692300566][3653 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f89c57f6-3a41-4e20-b48c-a326859acae8","id":"QR_f89c57f6-3a41-4e20-b48c-a326859acae8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:53:06][350226692300566][3809 ms][DEBUG] proc_open done in 3421 ms; code=255; res.len=3343 [2025-09-08 15:53:06][350226692300566][3809 ms][DEBUG] END runCmdUntilRes#1 in 3421 ms [2025-09-08 15:53:06][350226692300566][3809 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:53:09][350226692300566][0 ms][INFO] === Request start === [2025-09-08 15:53:09][350226692300566][1 ms][DEBUG] START check_scloud [2025-09-08 15:53:09][350226692300566][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:53:09][350226692300566][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 11262 15610 24734912 216752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:53:09][350226692300566][273 ms][DEBUG] targetPkg: running [2025-09-08 15:53:09][350226692300566][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-08 15:53:09][350226692300566][273 ms][DEBUG] START check_boot_completed [2025-09-08 15:53:09][350226692300566][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:53:09][350226692300566][320 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:53:09][350226692300566][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:53:09][350226692300566][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:53:09][350226692300566][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:53:09][350226692300566][367 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:53:09][350226692300566][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226692300566\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6930\"}'\'' -e'"" [2025-09-08 15:53:09][350226692300566][367 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:53:09][350226692300566][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226692300566\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6930\"}'\'' -e'"" [2025-09-08 15:53:14][350226692300566][5272 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4de069a4-1b12-46bc-a081-c1f21c815f0b","id":"QR_4de069a4-1b12-46bc-a081-c1f21c815f0b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:53:14][350226692300566][5428 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-08 15:53:14][350226692300566][5428 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-09-08 15:53:14][350226692300566][5428 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:53:19][351044513689524][0 ms][INFO] === Request start === [2025-09-08 15:53:19][351044513689524][1 ms][DEBUG] START check_scloud [2025-09-08 15:53:19][351044513689524][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:53:19][351044513689524][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 11262 15610 24879560 228684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:53:19][351044513689524][317 ms][DEBUG] targetPkg: running [2025-09-08 15:53:19][351044513689524][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 15:53:19][351044513689524][317 ms][DEBUG] START check_boot_completed [2025-09-08 15:53:19][351044513689524][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:53:19][351044513689524][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:53:19][351044513689524][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:53:19][351044513689524][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 15:53:19][351044513689524][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 15:53:19][351044513689524][426 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:53:19][351044513689524][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044513689524\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7620\"}'\'' -e'"" [2025-09-08 15:53:19][351044513689524][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:53:19][351044513689524][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044513689524\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7620\"}'\'' -e'"" [2025-09-08 15:53:24][351044513689524][5034 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ba8c440-1432-4b8f-a460-d52092e5d2d7","id":"QR_7ba8c440-1432-4b8f-a460-d52092e5d2d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:53:24][351044513689524][5190 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-08 15:53:24][351044513689524][5190 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-08 15:53:24][351044513689524][5190 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:53:26][351044513689524][0 ms][INFO] === Request start === [2025-09-08 15:53:26][351044513689524][1 ms][DEBUG] START check_scloud [2025-09-08 15:53:26][351044513689524][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:53:26][351044513689524][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 11262 15610 25001648 240664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:53:26][351044513689524][318 ms][DEBUG] targetPkg: running [2025-09-08 15:53:26][351044513689524][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 15:53:26][351044513689524][318 ms][DEBUG] START check_boot_completed [2025-09-08 15:53:26][351044513689524][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:53:26][351044513689524][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:53:26][351044513689524][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:53:26][351044513689524][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:53:26][351044513689524][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 15:53:26][351044513689524][412 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:53:26][351044513689524][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044513689524\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5011\"}'\'' -e'"" [2025-09-08 15:53:26][351044513689524][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:53:26][351044513689524][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044513689524\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5011\"}'\'' -e'"" [2025-09-08 15:53:30][351044513689524][4176 ms][DEBUG] proc_open done in 3765 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 15:53:30][351044513689524][4176 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-09-08 15:53:30][351044513689524][4176 ms][WARN] Detected error: Process with pid 11262 either refused to load frida-agent, or terminated during injectionProcess with pid 11262 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 15:53:30][351044513689524][4176 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 15:53:31][351044513689524][4426 ms][DEBUG] SU: done in 250 ms; outsystem 15808 15610 12697276 187464 ep_poll 0 S system_server\n [2025-09-08 15:53:31][351044513689524][4426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 15:53:31][351044513689524][4551 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 15:53:31][351044513689524][4551 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 15:53:31][351044513689524][4551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 15:53:31][351044513689524][4692 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 15:53:31][351044513689524][4692 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 15:53:31][351044513689524][4864 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 15:53:33][351044513689524][6879 ms][DEBUG] START check_boot_completed [2025-09-08 15:53:33][351044513689524][6879 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:53:33][351044513689524][6926 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:53:33][351044513689524][6926 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:53:33][351044513689524][6973 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 15:53:33][351044513689524][6973 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 15:53:36][351044513689524][9987 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 15:53:36][351044513689524][9987 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044513689524\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5011\"}'\'' -e'"" [2025-09-08 15:53:41][351044513689524][14814 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4a0823a-3e6b-4ca1-bbbf-32ad75a51999","id":"QR_e4a0823a-3e6b-4ca1-bbbf-32ad75a51999","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:53:41][351044513689524][14971 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=3343 [2025-09-08 15:53:41][351044513689524][14971 ms][DEBUG] END runCmdUntilRes#2 in 4983 ms [2025-09-08 15:53:41][351044513689524][14971 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:55:03][351648443729489][1 ms][INFO] === Request start === [2025-09-08 15:55:03][351648443729489][1 ms][DEBUG] START check_scloud [2025-09-08 15:55:03][351648443729489][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:55:03][351648443729489][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 12631 15610 23580212 126608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:55:03][351648443729489][313 ms][DEBUG] targetPkg: running [2025-09-08 15:55:03][351648443729489][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 15:55:03][351648443729489][313 ms][DEBUG] START check_boot_completed [2025-09-08 15:55:03][351648443729489][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:55:03][351648443729489][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 15:55:03][351648443729489][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:55:04][351648443729489][423 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 15:55:04][351648443729489][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 15:55:04][351648443729489][423 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:55:04][351648443729489][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351648443729489\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7751\"}'\'' -e'"" [2025-09-08 15:55:04][351648443729489][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:55:04][351648443729489][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351648443729489\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7751\"}'\'' -e'"" [2025-09-08 15:55:08][351648443729489][5390 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af1bed0f-5f96-4255-af42-3247f69e18cf","id":"QR_af1bed0f-5f96-4255-af42-3247f69e18cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:55:09][351648443729489][5546 ms][DEBUG] proc_open done in 5123 ms; code=255; res.len=3343 [2025-09-08 15:55:09][351648443729489][5546 ms][DEBUG] END runCmdUntilRes#1 in 5123 ms [2025-09-08 15:55:09][351648443729489][5546 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:55:11][351648443729489][1 ms][INFO] === Request start === [2025-09-08 15:55:11][351648443729489][1 ms][DEBUG] START check_scloud [2025-09-08 15:55:11][351648443729489][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:55:11][351648443729489][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 12631 15610 23712572 137248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:55:11][351648443729489][312 ms][DEBUG] targetPkg: running [2025-09-08 15:55:11][351648443729489][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 15:55:11][351648443729489][312 ms][DEBUG] START check_boot_completed [2025-09-08 15:55:11][351648443729489][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:55:11][351648443729489][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:55:11][351648443729489][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:55:11][351648443729489][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 15:55:11][351648443729489][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 15:55:11][351648443729489][422 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:55:11][351648443729489][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351648443729489\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1392\"}'\'' -e'"" [2025-09-08 15:55:11][351648443729489][422 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:55:11][351648443729489][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351648443729489\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1392\"}'\'' -e'"" [2025-09-08 15:55:16][351648443729489][5389 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b3bdfc0-ecb9-4057-a0d6-85a06edb5298","id":"QR_6b3bdfc0-ecb9-4057-a0d6-85a06edb5298","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:55:17][351648443729489][5545 ms][DEBUG] proc_open done in 5123 ms; code=255; res.len=3343 [2025-09-08 15:55:17][351648443729489][5545 ms][DEBUG] END runCmdUntilRes#1 in 5123 ms [2025-09-08 15:55:17][351648443729489][5545 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:56:03][351270410221752][0 ms][INFO] === Request start === [2025-09-08 15:56:03][351270410221752][1 ms][DEBUG] START check_scloud [2025-09-08 15:56:03][351270410221752][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:56:03][351270410221752][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 12631 15610 23784368 149432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:56:03][351270410221752][320 ms][DEBUG] targetPkg: running [2025-09-08 15:56:03][351270410221752][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 15:56:03][351270410221752][320 ms][DEBUG] START check_boot_completed [2025-09-08 15:56:03][351270410221752][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:56:03][351270410221752][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:56:03][351270410221752][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:56:03][351270410221752][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 15:56:03][351270410221752][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 15:56:03][351270410221752][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:56:03][351270410221752][554 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5126\nsuccessfulTxPacketsPerSecond: 0.9824539252782633\nretriedTxPackets: 1200\nretriedTxPacketsPerSecond: 0.22884468942224606\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4587\nsuccessfulRxPacketsPerSecond: 0.8285755996322702\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:56:03][351270410221752][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:56:04][351270410221752][882 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.989/203.989/203.989/0.000 ms\n [2025-09-08 15:56:04][351270410221752][882 ms][DEBUG] check_internet: online [2025-09-08 15:56:04][351270410221752][882 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:56:04][351270410221752][882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270410221752\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8136\"}'\'' -e'"" [2025-09-08 15:56:04][351270410221752][882 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:56:04][351270410221752][882 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270410221752\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8136\"}'\'' -e'"" [2025-09-08 15:56:08][351270410221752][5287 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f7df010f-1cb6-43ca-8c0a-cb1c5040860d","id":"QR_f7df010f-1cb6-43ca-8c0a-cb1c5040860d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:56:08][351270410221752][5443 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-09-08 15:56:08][351270410221752][5443 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-08 15:56:08][351270410221752][5443 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:58:03][353173734195066][1 ms][INFO] === Request start === [2025-09-08 15:58:03][353173734195066][1 ms][DEBUG] START check_scloud [2025-09-08 15:58:03][353173734195066][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:58:03][353173734195066][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 12631 15610 23932172 160700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:58:03][353173734195066][306 ms][DEBUG] targetPkg: running [2025-09-08 15:58:03][353173734195066][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 15:58:03][353173734195066][306 ms][DEBUG] START check_boot_completed [2025-09-08 15:58:03][353173734195066][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:58:03][353173734195066][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 15:58:03][353173734195066][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:58:03][353173734195066][385 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 15:58:03][353173734195066][385 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 15:58:03][353173734195066][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:58:03][353173734195066][493 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5126\nsuccessfulTxPacketsPerSecond: 0.9824539252782633\nretriedTxPackets: 1200\nretriedTxPacketsPerSecond: 0.22884468942224606\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4587\nsuccessfulRxPacketsPerSecond: 0.8285755996322702\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:58:03][353173734195066][494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:58:05][353173734195066][1806 ms][DEBUG] SU: done in 1312 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.055/199.055/199.055/0.000 ms\n [2025-09-08 15:58:05][353173734195066][1806 ms][DEBUG] check_internet: online [2025-09-08 15:58:05][353173734195066][1806 ms][DEBUG] rawBody.length=1150 [2025-09-08 15:58:05][353173734195066][1806 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173734195066\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"FTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4280\"}'\'' -e'"" [2025-09-08 15:58:05][353173734195066][1806 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:58:05][353173734195066][1806 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173734195066\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"FTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4280\"}'\'' -e'"" [2025-09-08 15:58:08][353173734195066][5476 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6f28603-2bc2-45fe-958f-fc8c66acd264","id":"QR_f6f28603-2bc2-45fe-958f-fc8c66acd264","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:58:09][353173734195066][5633 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-09-08 15:58:09][353173734195066][5633 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-09-08 15:58:09][353173734195066][5633 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 15:58:11][353173734195066][0 ms][INFO] === Request start === [2025-09-08 15:58:11][353173734195066][1 ms][DEBUG] START check_scloud [2025-09-08 15:58:11][353173734195066][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 15:58:11][353173734195066][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 12631 15610 24109588 171692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 15:58:11][353173734195066][319 ms][DEBUG] targetPkg: running [2025-09-08 15:58:11][353173734195066][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 15:58:11][353173734195066][319 ms][DEBUG] START check_boot_completed [2025-09-08 15:58:11][353173734195066][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 15:58:11][353173734195066][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 15:58:11][353173734195066][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 15:58:11][353173734195066][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 15:58:11][353173734195066][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 15:58:11][353173734195066][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 15:58:11][353173734195066][553 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5126\nsuccessfulTxPacketsPerSecond: 0.9824539252782633\nretriedTxPackets: 1200\nretriedTxPacketsPerSecond: 0.22884468942224606\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4587\nsuccessfulRxPacketsPerSecond: 0.8285755996322702\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 15:58:11][353173734195066][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 15:58:12][353173734195066][883 ms][DEBUG] SU: done in 330 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=234 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 234.950/234.950/234.950/0.000 ms\n [2025-09-08 15:58:12][353173734195066][884 ms][DEBUG] check_internet: online [2025-09-08 15:58:12][353173734195066][884 ms][DEBUG] rawBody.length=1160 [2025-09-08 15:58:12][353173734195066][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173734195066\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"FTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2523\"}'\'' -e'"" [2025-09-08 15:58:12][353173734195066][884 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 15:58:12][353173734195066][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173734195066\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"FTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2523\"}'\'' -e'"" [2025-09-08 15:58:17][353173734195066][5943 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b919aef-e522-414b-8ada-51d8821fd0ee","id":"QR_5b919aef-e522-414b-8ada-51d8821fd0ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 15:58:17][353173734195066][6099 ms][DEBUG] proc_open done in 5215 ms; code=255; res.len=3343 [2025-09-08 15:58:17][353173734195066][6099 ms][DEBUG] END runCmdUntilRes#1 in 5215 ms [2025-09-08 15:58:17][353173734195066][6099 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:01:03][355128632063483][1 ms][INFO] === Request start === [2025-09-08 16:01:03][355128632063483][1 ms][DEBUG] START check_scloud [2025-09-08 16:01:03][355128632063483][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:01:04][355128632063483][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 12631 15610 24213204 184008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:01:04][355128632063483][302 ms][DEBUG] targetPkg: running [2025-09-08 16:01:04][355128632063483][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 16:01:04][355128632063483][302 ms][DEBUG] START check_boot_completed [2025-09-08 16:01:04][355128632063483][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:01:04][355128632063483][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:01:04][355128632063483][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:01:04][355128632063483][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:01:04][355128632063483][381 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 16:01:04][355128632063483][381 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:01:04][355128632063483][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128632063483\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9251\"}'\'' -e'"" [2025-09-08 16:01:04][355128632063483][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:01:04][355128632063483][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128632063483\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9251\"}'\'' -e'"" [2025-09-08 16:01:08][355128632063483][4910 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e6235562-f050-487b-b5ce-4d16ccf94173","id":"QR_e6235562-f050-487b-b5ce-4d16ccf94173","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:01:08][355128632063483][5066 ms][DEBUG] proc_open done in 4685 ms; code=255; res.len=3343 [2025-09-08 16:01:08][355128632063483][5066 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-08 16:01:08][355128632063483][5066 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:01:11][355128632063483][0 ms][INFO] === Request start === [2025-09-08 16:01:11][355128632063483][1 ms][DEBUG] START check_scloud [2025-09-08 16:01:11][355128632063483][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:01:11][355128632063483][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 12631 15610 24357724 194836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:01:11][355128632063483][261 ms][DEBUG] targetPkg: running [2025-09-08 16:01:11][355128632063483][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-08 16:01:11][355128632063483][261 ms][DEBUG] START check_boot_completed [2025-09-08 16:01:11][355128632063483][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:01:11][355128632063483][307 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:01:11][355128632063483][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:01:11][355128632063483][370 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:01:11][355128632063483][370 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:01:11][355128632063483][370 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:01:11][355128632063483][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128632063483\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9881\"}'\'' -e'"" [2025-09-08 16:01:11][355128632063483][370 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:01:11][355128632063483][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128632063483\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9881\"}'\'' -e'"" [2025-09-08 16:01:16][355128632063483][5087 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58986318-f2b1-431d-bd28-bbbaf288caca","id":"QR_58986318-f2b1-431d-bd28-bbbaf288caca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:01:16][355128632063483][5244 ms][DEBUG] proc_open done in 4874 ms; code=255; res.len=3343 [2025-09-08 16:01:16][355128632063483][5244 ms][DEBUG] END runCmdUntilRes#1 in 4874 ms [2025-09-08 16:01:16][355128632063483][5244 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:01:21][352672511464893][0 ms][INFO] === Request start === [2025-09-08 16:01:21][352672511464893][1 ms][DEBUG] START check_scloud [2025-09-08 16:01:21][352672511464893][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:01:22][352672511464893][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 12631 15610 24530916 206620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:01:22][352672511464893][307 ms][DEBUG] targetPkg: running [2025-09-08 16:01:22][352672511464893][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 16:01:22][352672511464893][307 ms][DEBUG] START check_boot_completed [2025-09-08 16:01:22][352672511464893][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:01:22][352672511464893][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:01:22][352672511464893][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:01:22][352672511464893][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:01:22][352672511464893][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:01:22][352672511464893][416 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:01:22][352672511464893][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672511464893\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1240\"}'\'' -e'"" [2025-09-08 16:01:22][352672511464893][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:01:22][352672511464893][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672511464893\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1240\"}'\'' -e'"" [2025-09-08 16:01:27][352672511464893][5134 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8cbce61d-62e6-49d4-84b8-e80c416438fe","id":"QR_8cbce61d-62e6-49d4-84b8-e80c416438fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:01:27][352672511464893][5290 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-09-08 16:01:27][352672511464893][5290 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-09-08 16:01:27][352672511464893][5290 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:01:30][352672511464893][0 ms][INFO] === Request start === [2025-09-08 16:01:30][352672511464893][1 ms][DEBUG] START check_scloud [2025-09-08 16:01:30][352672511464893][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:01:31][352672511464893][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 12631 15610 24695816 217272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:01:31][352672511464893][314 ms][DEBUG] targetPkg: running [2025-09-08 16:01:31][352672511464893][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 16:01:31][352672511464893][315 ms][DEBUG] START check_boot_completed [2025-09-08 16:01:31][352672511464893][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:01:31][352672511464893][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:01:31][352672511464893][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:01:31][352672511464893][424 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:01:31][352672511464893][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:01:31][352672511464893][424 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:01:31][352672511464893][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672511464893\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6219\"}'\'' -e'"" [2025-09-08 16:01:31][352672511464893][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:01:31][352672511464893][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672511464893\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6219\"}'\'' -e'"" [2025-09-08 16:01:35][352672511464893][4267 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_577531d8-ef21-499c-96b8-2197a53abe08","id":"QR_577531d8-ef21-499c-96b8-2197a53abe08","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:01:35][352672511464893][4423 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-08 16:01:35][352672511464893][4423 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-08 16:01:35][352672511464893][4423 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:03:04][352549935616706][1 ms][INFO] === Request start === [2025-09-08 16:03:04][352549935616706][1 ms][DEBUG] START check_scloud [2025-09-08 16:03:04][352549935616706][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:03:04][352549935616706][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 12631 15610 24783908 229476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:03:04][352549935616706][283 ms][DEBUG] targetPkg: running [2025-09-08 16:03:04][352549935616706][283 ms][DEBUG] END check_scloud in 282 ms [2025-09-08 16:03:04][352549935616706][283 ms][DEBUG] START check_boot_completed [2025-09-08 16:03:04][352549935616706][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:03:04][352549935616706][314 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:03:04][352549935616706][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:03:04][352549935616706][362 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 16:03:04][352549935616706][362 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 16:03:04][352549935616706][362 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:03:04][352549935616706][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549935616706\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9945\"}'\'' -e'"" [2025-09-08 16:03:04][352549935616706][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:03:04][352549935616706][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549935616706\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9945\"}'\'' -e'"" [2025-09-08 16:03:09][352549935616706][5110 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f1dd60b-c803-4b89-b254-bc9f6081e324","id":"QR_1f1dd60b-c803-4b89-b254-bc9f6081e324","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:03:09][352549935616706][5266 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-08 16:03:09][352549935616706][5266 ms][DEBUG] END runCmdUntilRes#1 in 4904 ms [2025-09-08 16:03:09][352549935616706][5266 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:03:11][352549935616706][0 ms][INFO] === Request start === [2025-09-08 16:03:11][352549935616706][1 ms][DEBUG] START check_scloud [2025-09-08 16:03:11][352549935616706][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:03:12][352549935616706][326 ms][DEBUG] SU: done in 326 ms; outu0_a118 12631 15610 24925608 240312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:03:12][352549935616706][327 ms][DEBUG] targetPkg: running [2025-09-08 16:03:12][352549935616706][327 ms][DEBUG] END check_scloud in 326 ms [2025-09-08 16:03:12][352549935616706][327 ms][DEBUG] START check_boot_completed [2025-09-08 16:03:12][352549935616706][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:03:12][352549935616706][373 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:03:12][352549935616706][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:03:12][352549935616706][451 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 16:03:12][352549935616706][451 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 16:03:12][352549935616706][452 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:03:12][352549935616706][452 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549935616706\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9535\"}'\'' -e'"" [2025-09-08 16:03:12][352549935616706][452 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:03:12][352549935616706][452 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549935616706\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9535\"}'\'' -e'"" [2025-09-08 16:03:15][352549935616706][4232 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 16:03:15][352549935616706][4232 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-08 16:03:15][352549935616706][4232 ms][WARN] Detected error: Process with pid 12631 either refused to load frida-agent, or terminated during injectionProcess with pid 12631 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 16:03:15][352549935616706][4232 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 16:03:16][352549935616706][4497 ms][DEBUG] SU: done in 266 ms; outsystem 15808 15610 12697276 191612 ep_poll 0 S system_server\n [2025-09-08 16:03:16][352549935616706][4497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 16:03:16][352549935616706][4638 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 16:03:16][352549935616706][4638 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 16:03:16][352549935616706][4638 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 16:03:16][352549935616706][4779 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 16:03:16][352549935616706][4779 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 16:03:16][352549935616706][4968 ms][DEBUG] SU: done in 189 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 16:03:18][352549935616706][6981 ms][DEBUG] START check_boot_completed [2025-09-08 16:03:18][352549935616706][6981 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:03:18][352549935616706][7028 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:03:18][352549935616706][7028 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:03:18][352549935616706][7075 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:03:18][352549935616706][7075 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:03:21][352549935616706][10090 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 16:03:21][352549935616706][10090 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549935616706\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9535\"}'\'' -e'"" [2025-09-08 16:03:26][352549935616706][15167 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ca5ef39-fb36-4dc9-8e26-28060f2ef026","id":"QR_4ca5ef39-fb36-4dc9-8e26-28060f2ef026","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:03:27][352549935616706][15323 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-08 16:03:27][352549935616706][15323 ms][DEBUG] END runCmdUntilRes#2 in 5233 ms [2025-09-08 16:03:27][352549935616706][15323 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:05:04][351700862241700][0 ms][INFO] === Request start === [2025-09-08 16:05:04][351700862241700][1 ms][DEBUG] START check_scloud [2025-09-08 16:05:04][351700862241700][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:05:05][351700862241700][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 14572 15610 23522808 126960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:05:05][351700862241700][325 ms][DEBUG] targetPkg: running [2025-09-08 16:05:05][351700862241700][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 16:05:05][351700862241700][325 ms][DEBUG] START check_boot_completed [2025-09-08 16:05:05][351700862241700][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:05:05][351700862241700][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:05:05][351700862241700][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:05:05][351700862241700][434 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 16:05:05][351700862241700][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:05:05][351700862241700][434 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:05:05][351700862241700][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351700862241700\",\"model\":\"SM-G990U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7895\"}'\'' -e'"" [2025-09-08 16:05:05][351700862241700][435 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:05:05][351700862241700][435 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351700862241700\",\"model\":\"SM-G990U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7895\"}'\'' -e'"" [2025-09-08 16:05:11][351700862241700][6105 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6fbeca79-d3b5-46bb-b828-1171f0421318","id":"QR_6fbeca79-d3b5-46bb-b828-1171f0421318","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:05:11][351700862241700][6261 ms][DEBUG] proc_open done in 5826 ms; code=255; res.len=3343 [2025-09-08 16:05:11][351700862241700][6261 ms][DEBUG] END runCmdUntilRes#1 in 5826 ms [2025-09-08 16:05:11][351700862241700][6261 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:05:14][351700862241700][1 ms][INFO] === Request start === [2025-09-08 16:05:14][351700862241700][1 ms][DEBUG] START check_scloud [2025-09-08 16:05:14][351700862241700][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:05:15][351700862241700][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 14572 15610 23687872 137704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:05:15][351700862241700][295 ms][DEBUG] targetPkg: running [2025-09-08 16:05:15][351700862241700][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-08 16:05:15][351700862241700][295 ms][DEBUG] START check_boot_completed [2025-09-08 16:05:15][351700862241700][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:05:15][351700862241700][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:05:15][351700862241700][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:05:15][351700862241700][404 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:05:15][351700862241700][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:05:15][351700862241700][404 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:05:15][351700862241700][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351700862241700\",\"model\":\"SM-G990U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6017\"}'\'' -e'"" [2025-09-08 16:05:15][351700862241700][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:05:15][351700862241700][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351700862241700\",\"model\":\"SM-G990U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6017\"}'\'' -e'"" [2025-09-08 16:05:19][351700862241700][4372 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7efcda50-7e29-4b35-b6e8-66bbdef2f056","id":"QR_7efcda50-7e29-4b35-b6e8-66bbdef2f056","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:05:19][351700862241700][4528 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-09-08 16:05:19][351700862241700][4528 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-09-08 16:05:19][351700862241700][4528 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:08:03][355731678668691][1 ms][INFO] === Request start === [2025-09-08 16:08:03][355731678668691][1 ms][DEBUG] START check_scloud [2025-09-08 16:08:03][355731678668691][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:08:04][355731678668691][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 14572 15610 23774992 149508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:08:04][355731678668691][303 ms][DEBUG] targetPkg: running [2025-09-08 16:08:04][355731678668691][303 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 16:08:04][355731678668691][303 ms][DEBUG] START check_boot_completed [2025-09-08 16:08:04][355731678668691][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:08:04][355731678668691][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:08:04][355731678668691][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:08:04][355731678668691][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:08:04][355731678668691][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 16:08:04][355731678668691][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:08:04][355731678668691][490 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5457\nsuccessfulTxPacketsPerSecond: 0.5484495752392275\nretriedTxPackets: 1282\nretriedTxPacketsPerSecond: 0.1265652865936679\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4881\nsuccessfulRxPacketsPerSecond: 0.4717433409400349\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:08:04][355731678668691][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:08:05][355731678668691][1958 ms][DEBUG] SU: done in 1468 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.678/198.678/198.678/0.000 ms\n [2025-09-08 16:08:05][355731678668691][1958 ms][DEBUG] check_internet: online [2025-09-08 16:08:05][355731678668691][1958 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:08:05][355731678668691][1958 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731678668691\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5202\"}'\'' -e'"" [2025-09-08 16:08:05][355731678668691][1958 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:08:05][355731678668691][1959 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731678668691\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5202\"}'\'' -e'"" [2025-09-08 16:08:09][355731678668691][5786 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_847176f4-c2da-414e-989a-129ae1776cbb","id":"QR_847176f4-c2da-414e-989a-129ae1776cbb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:08:09][355731678668691][5942 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-09-08 16:08:09][355731678668691][5942 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-08 16:08:09][355731678668691][5942 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:08:12][355731678668691][0 ms][INFO] === Request start === [2025-09-08 16:08:12][355731678668691][1 ms][DEBUG] START check_scloud [2025-09-08 16:08:12][355731678668691][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:08:12][355731678668691][324 ms][DEBUG] SU: done in 324 ms; outu0_a118 14572 15610 23923480 160456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:08:12][355731678668691][325 ms][DEBUG] targetPkg: running [2025-09-08 16:08:12][355731678668691][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 16:08:12][355731678668691][325 ms][DEBUG] START check_boot_completed [2025-09-08 16:08:12][355731678668691][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:08:12][355731678668691][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:08:12][355731678668691][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:08:12][355731678668691][418 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:08:12][355731678668691][418 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:08:12][355731678668691][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:08:12][355731678668691][528 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5685\nsuccessfulTxPacketsPerSecond: 0.7568615474499077\nretriedTxPackets: 1319\nretriedTxPacketsPerSecond: 0.12282402305108152\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5081\nsuccessfulRxPacketsPerSecond: 0.6639136381139541\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:08:12][355731678668691][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:08:13][355731678668691][855 ms][DEBUG] SU: done in 327 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.382/204.382/204.382/0.000 ms\n [2025-09-08 16:08:13][355731678668691][855 ms][DEBUG] check_internet: online [2025-09-08 16:08:13][355731678668691][855 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:08:13][355731678668691][855 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731678668691\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2926\"}'\'' -e'"" [2025-09-08 16:08:13][355731678668691][855 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:08:13][355731678668691][856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731678668691\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2926\"}'\'' -e'"" [2025-09-08 16:08:17][355731678668691][5604 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a623a41f-611a-432a-b211-3842a83dd7b0","id":"QR_a623a41f-611a-432a-b211-3842a83dd7b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:08:17][355731678668691][5760 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-08 16:08:17][355731678668691][5761 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-08 16:08:17][355731678668691][5761 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:08:22][352672513482141][0 ms][INFO] === Request start === [2025-09-08 16:08:22][352672513482141][1 ms][DEBUG] START check_scloud [2025-09-08 16:08:22][352672513482141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:08:22][352672513482141][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 14572 15610 24065956 171368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:08:22][352672513482141][328 ms][DEBUG] targetPkg: running [2025-09-08 16:08:22][352672513482141][328 ms][DEBUG] END check_scloud in 328 ms [2025-09-08 16:08:22][352672513482141][328 ms][DEBUG] START check_boot_completed [2025-09-08 16:08:22][352672513482141][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:08:22][352672513482141][375 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:08:22][352672513482141][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:08:22][352672513482141][424 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 16:08:22][352672513482141][424 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-08 16:08:22][352672513482141][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:08:22][352672513482141][547 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5685\nsuccessfulTxPacketsPerSecond: 0.7568615474499077\nretriedTxPackets: 1319\nretriedTxPacketsPerSecond: 0.12282402305108152\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5081\nsuccessfulRxPacketsPerSecond: 0.6639136381139541\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:08:22][352672513482141][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:08:23][352672513482141][845 ms][DEBUG] SU: done in 298 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.452/200.452/200.452/0.000 ms\n [2025-09-08 16:08:23][352672513482141][845 ms][DEBUG] check_internet: online [2025-09-08 16:08:23][352672513482141][845 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:08:23][352672513482141][845 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672513482141\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3287\"}'\'' -e'"" [2025-09-08 16:08:23][352672513482141][845 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:08:23][352672513482141][846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672513482141\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3287\"}'\'' -e'"" [2025-09-08 16:08:26][352672513482141][4249 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8991d38f-9f02-4253-9eaf-d36daf948512","id":"QR_8991d38f-9f02-4253-9eaf-d36daf948512","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:08:26][352672513482141][4405 ms][DEBUG] proc_open done in 3560 ms; code=255; res.len=3343 [2025-09-08 16:08:26][352672513482141][4405 ms][DEBUG] END runCmdUntilRes#1 in 3560 ms [2025-09-08 16:08:26][352672513482141][4405 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:08:28][352672513482141][0 ms][INFO] === Request start === [2025-09-08 16:08:28][352672513482141][1 ms][DEBUG] START check_scloud [2025-09-08 16:08:28][352672513482141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:08:29][352672513482141][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 14572 15610 24187912 183204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:08:29][352672513482141][310 ms][DEBUG] targetPkg: running [2025-09-08 16:08:29][352672513482141][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 16:08:29][352672513482141][310 ms][DEBUG] START check_boot_completed [2025-09-08 16:08:29][352672513482141][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:08:29][352672513482141][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:08:29][352672513482141][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:08:29][352672513482141][419 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:08:29][352672513482141][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:08:29][352672513482141][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:08:29][352672513482141][529 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5685\nsuccessfulTxPacketsPerSecond: 0.7568615474499077\nretriedTxPackets: 1319\nretriedTxPacketsPerSecond: 0.12282402305108152\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5081\nsuccessfulRxPacketsPerSecond: 0.6639136381139541\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:08:29][352672513482141][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:08:29][352672513482141][888 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.618/239.618/239.618/0.000 ms\n [2025-09-08 16:08:29][352672513482141][888 ms][DEBUG] check_internet: online [2025-09-08 16:08:29][352672513482141][888 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:08:29][352672513482141][888 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672513482141\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3437\"}'\'' -e'"" [2025-09-08 16:08:29][352672513482141][889 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:08:29][352672513482141][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672513482141\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3437\"}'\'' -e'"" [2025-09-08 16:08:34][352672513482141][5231 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70f6b1fb-1850-4ce4-b7b9-420b85bb0573","id":"QR_70f6b1fb-1850-4ce4-b7b9-420b85bb0573","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:08:34][352672513482141][5387 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-09-08 16:08:34][352672513482141][5387 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-09-08 16:08:34][352672513482141][5387 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:09:04][357299882779041][0 ms][INFO] === Request start === [2025-09-08 16:09:04][357299882779041][1 ms][DEBUG] START check_scloud [2025-09-08 16:09:04][357299882779041][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:09:05][357299882779041][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 14572 15610 24279076 194332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:09:05][357299882779041][315 ms][DEBUG] targetPkg: running [2025-09-08 16:09:05][357299882779041][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 16:09:05][357299882779041][315 ms][DEBUG] START check_boot_completed [2025-09-08 16:09:05][357299882779041][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:09:05][357299882779041][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:09:05][357299882779041][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:09:05][357299882779041][455 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 16:09:05][357299882779041][455 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-08 16:09:05][357299882779041][455 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:09:05][357299882779041][455 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357299882779041\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6562\"}'\'' -e'"" [2025-09-08 16:09:05][357299882779041][455 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:09:05][357299882779041][455 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357299882779041\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6562\"}'\'' -e'"" [2025-09-08 16:09:10][357299882779041][5079 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c6fdfdcf-24d7-4691-90d3-2b6c0ceb3cf4","id":"QR_c6fdfdcf-24d7-4691-90d3-2b6c0ceb3cf4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:09:10][357299882779041][5235 ms][DEBUG] proc_open done in 4779 ms; code=255; res.len=3343 [2025-09-08 16:09:10][357299882779041][5235 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-08 16:09:10][357299882779041][5235 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:09:13][357299882779041][0 ms][INFO] === Request start === [2025-09-08 16:09:13][357299882779041][1 ms][DEBUG] START check_scloud [2025-09-08 16:09:13][357299882779041][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:09:14][357299882779041][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 14572 15610 24401132 206124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:09:14][357299882779041][296 ms][DEBUG] targetPkg: running [2025-09-08 16:09:14][357299882779041][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-08 16:09:14][357299882779041][296 ms][DEBUG] START check_boot_completed [2025-09-08 16:09:14][357299882779041][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:09:14][357299882779041][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:09:14][357299882779041][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:09:14][357299882779041][391 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 16:09:14][357299882779041][391 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:09:14][357299882779041][391 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:09:14][357299882779041][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357299882779041\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7455\"}'\'' -e'"" [2025-09-08 16:09:14][357299882779041][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:09:14][357299882779041][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357299882779041\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7455\"}'\'' -e'"" [2025-09-08 16:09:18][357299882779041][4935 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cd334e3d-8d22-4c31-9257-7ee477cba965","id":"QR_cd334e3d-8d22-4c31-9257-7ee477cba965","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:09:18][357299882779041][5091 ms][DEBUG] proc_open done in 4700 ms; code=255; res.len=3343 [2025-09-08 16:09:18][357299882779041][5091 ms][DEBUG] END runCmdUntilRes#1 in 4700 ms [2025-09-08 16:09:18][357299882779041][5091 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:10:05][352610711286245][1 ms][INFO] === Request start === [2025-09-08 16:10:05][352610711286245][1 ms][DEBUG] START check_scloud [2025-09-08 16:10:05][352610711286245][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:10:05][352610711286245][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 14572 15610 24531244 217156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:10:05][352610711286245][305 ms][DEBUG] targetPkg: running [2025-09-08 16:10:05][352610711286245][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 16:10:05][352610711286245][305 ms][DEBUG] START check_boot_completed [2025-09-08 16:10:05][352610711286245][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:10:05][352610711286245][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:10:05][352610711286245][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:10:05][352610711286245][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:10:05][352610711286245][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 16:10:05][352610711286245][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:10:05][352610711286245][508 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5685\nsuccessfulTxPacketsPerSecond: 0.7568615474499077\nretriedTxPackets: 1319\nretriedTxPacketsPerSecond: 0.12282402305108152\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5081\nsuccessfulRxPacketsPerSecond: 0.6639136381139541\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:10:05][352610711286245][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:10:06][352610711286245][883 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.093/269.093/269.093/0.000 ms\n [2025-09-08 16:10:06][352610711286245][883 ms][DEBUG] check_internet: online [2025-09-08 16:10:06][352610711286245][883 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:10:06][352610711286245][883 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610711286245\",\"model\":\"SM-A356U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PCT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7157\"}'\'' -e'"" [2025-09-08 16:10:06][352610711286245][883 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:10:06][352610711286245][883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610711286245\",\"model\":\"SM-A356U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PCT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7157\"}'\'' -e'"" [2025-09-08 16:10:12][352610711286245][6850 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee2fd979-ccbc-46c7-aa49-9541418365f3","id":"QR_ee2fd979-ccbc-46c7-aa49-9541418365f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:10:12][352610711286245][7006 ms][DEBUG] proc_open done in 6123 ms; code=255; res.len=3343 [2025-09-08 16:10:12][352610711286245][7006 ms][DEBUG] END runCmdUntilRes#1 in 6123 ms [2025-09-08 16:10:12][352610711286245][7006 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:10:16][352610711286245][0 ms][INFO] === Request start === [2025-09-08 16:10:16][352610711286245][1 ms][DEBUG] START check_scloud [2025-09-08 16:10:16][352610711286245][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:10:16][352610711286245][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 14572 15610 24717748 229152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:10:16][352610711286245][298 ms][DEBUG] targetPkg: running [2025-09-08 16:10:16][352610711286245][298 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 16:10:16][352610711286245][298 ms][DEBUG] START check_boot_completed [2025-09-08 16:10:16][352610711286245][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:10:16][352610711286245][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:10:16][352610711286245][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:10:16][352610711286245][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:10:16][352610711286245][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:10:16][352610711286245][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:10:16][352610711286245][517 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5685\nsuccessfulTxPacketsPerSecond: 0.7568615474499077\nretriedTxPackets: 1319\nretriedTxPacketsPerSecond: 0.12282402305108152\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5081\nsuccessfulRxPacketsPerSecond: 0.6639136381139541\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:10:16][352610711286245][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:10:16][352610711286245][845 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.674/220.674/220.674/0.000 ms\n [2025-09-08 16:10:16][352610711286245][845 ms][DEBUG] check_internet: online [2025-09-08 16:10:16][352610711286245][845 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:10:16][352610711286245][845 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610711286245\",\"model\":\"SM-A356U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PCT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4152\"}'\'' -e'"" [2025-09-08 16:10:16][352610711286245][846 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:10:16][352610711286245][846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610711286245\",\"model\":\"SM-A356U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PCT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4152\"}'\'' -e'"" [2025-09-08 16:10:21][352610711286245][5281 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0744d0dc-2ed7-425a-98bf-a49d9f4087ec","id":"QR_0744d0dc-2ed7-425a-98bf-a49d9f4087ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:10:21][352610711286245][5437 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-08 16:10:21][352610711286245][5438 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-09-08 16:10:21][352610711286245][5438 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:13:04][359944696259973][1 ms][INFO] === Request start === [2025-09-08 16:13:04][359944696259973][1 ms][DEBUG] START check_scloud [2025-09-08 16:13:04][359944696259973][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:13:04][359944696259973][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 14572 15610 24835700 240320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:13:04][359944696259973][312 ms][DEBUG] targetPkg: running [2025-09-08 16:13:04][359944696259973][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 16:13:04][359944696259973][312 ms][DEBUG] START check_boot_completed [2025-09-08 16:13:04][359944696259973][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:13:04][359944696259973][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:13:04][359944696259973][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:13:04][359944696259973][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:13:04][359944696259973][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 16:13:04][359944696259973][390 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:13:04][359944696259973][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944696259973\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1898\"}'\'' -e'"" [2025-09-08 16:13:04][359944696259973][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:13:04][359944696259973][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944696259973\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1898\"}'\'' -e'"" [2025-09-08 16:13:08][359944696259973][4248 ms][DEBUG] proc_open done in 3858 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 16:13:08][359944696259973][4249 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-08 16:13:08][359944696259973][4249 ms][WARN] Detected error: Process with pid 14572 either refused to load frida-agent, or terminated during injectionProcess with pid 14572 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 16:13:08][359944696259973][4249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 16:13:08][359944696259973][4514 ms][DEBUG] SU: done in 265 ms; outsystem 15808 15610 12697276 187248 ep_poll 0 S system_server\n [2025-09-08 16:13:08][359944696259973][4514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 16:13:08][359944696259973][4655 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 16:13:08][359944696259973][4655 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 16:13:08][359944696259973][4655 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 16:13:08][359944696259973][4779 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 16:13:08][359944696259973][4780 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 16:13:09][359944696259973][4936 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 16:13:11][359944696259973][6951 ms][DEBUG] START check_boot_completed [2025-09-08 16:13:11][359944696259973][6951 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:13:11][359944696259973][6998 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:13:11][359944696259973][6998 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:13:11][359944696259973][7045 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:13:11][359944696259973][7045 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:13:14][359944696259973][10059 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 16:13:14][359944696259973][10059 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944696259973\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1898\"}'\'' -e'"" [2025-09-08 16:13:18][359944696259973][14293 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e1749c4-c4d8-4a63-b4ee-ef130efa5d37","id":"QR_8e1749c4-c4d8-4a63-b4ee-ef130efa5d37","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:13:18][359944696259973][14449 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-08 16:13:18][359944696259973][14449 ms][DEBUG] END runCmdUntilRes#2 in 4390 ms [2025-09-08 16:13:18][359944696259973][14449 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:13:20][359944696259973][0 ms][INFO] === Request start === [2025-09-08 16:13:20][359944696259973][1 ms][DEBUG] START check_scloud [2025-09-08 16:13:20][359944696259973][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:13:21][359944696259973][230 ms][DEBUG] SU: done in 229 ms; outu0_a118 16482 15610 23590624 123776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:13:21][359944696259973][230 ms][DEBUG] targetPkg: running [2025-09-08 16:13:21][359944696259973][230 ms][DEBUG] END check_scloud in 230 ms [2025-09-08 16:13:21][359944696259973][230 ms][DEBUG] START check_boot_completed [2025-09-08 16:13:21][359944696259973][230 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:13:21][359944696259973][277 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:13:21][359944696259973][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:13:21][359944696259973][324 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:13:21][359944696259973][324 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 16:13:21][359944696259973][324 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:13:21][359944696259973][324 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944696259973\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1835\"}'\'' -e'"" [2025-09-08 16:13:21][359944696259973][324 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:13:21][359944696259973][324 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944696259973\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1835\"}'\'' -e'"" [2025-09-08 16:13:25][359944696259973][4932 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78325e8f-2d46-44de-8676-2b72f8297da7","id":"QR_78325e8f-2d46-44de-8676-2b72f8297da7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:13:25][359944696259973][5088 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-08 16:13:25][359944696259973][5089 ms][DEBUG] END runCmdUntilRes#1 in 4765 ms [2025-09-08 16:13:25][359944696259973][5089 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:13:31][350915069826373][0 ms][INFO] === Request start === [2025-09-08 16:13:31][350915069826373][1 ms][DEBUG] START check_scloud [2025-09-08 16:13:31][350915069826373][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:13:31][350915069826373][243 ms][DEBUG] SU: done in 243 ms; outu0_a118 16482 15610 23744564 137160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:13:31][350915069826373][244 ms][DEBUG] targetPkg: running [2025-09-08 16:13:31][350915069826373][244 ms][DEBUG] END check_scloud in 243 ms [2025-09-08 16:13:31][350915069826373][244 ms][DEBUG] START check_boot_completed [2025-09-08 16:13:31][350915069826373][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:13:31][350915069826373][291 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:13:31][350915069826373][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:13:31][350915069826373][384 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 16:13:31][350915069826373][384 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-08 16:13:31][350915069826373][384 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:13:31][350915069826373][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915069826373\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8103\"}'\'' -e'"" [2025-09-08 16:13:31][350915069826373][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:13:31][350915069826373][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915069826373\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8103\"}'\'' -e'"" [2025-09-08 16:13:36][350915069826373][5148 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a2a4285-6b5f-4ea8-aa65-6cb240e989bf","id":"QR_9a2a4285-6b5f-4ea8-aa65-6cb240e989bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:13:36][350915069826373][5305 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-08 16:13:36][350915069826373][5305 ms][DEBUG] END runCmdUntilRes#1 in 4920 ms [2025-09-08 16:13:36][350915069826373][5305 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:13:40][350915069826373][0 ms][INFO] === Request start === [2025-09-08 16:13:40][350915069826373][1 ms][DEBUG] START check_scloud [2025-09-08 16:13:40][350915069826373][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:13:40][350915069826373][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 16482 15610 23839528 149292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:13:40][350915069826373][304 ms][DEBUG] targetPkg: running [2025-09-08 16:13:40][350915069826373][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 16:13:40][350915069826373][304 ms][DEBUG] START check_boot_completed [2025-09-08 16:13:40][350915069826373][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:13:40][350915069826373][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:13:40][350915069826373][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:13:40][350915069826373][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:13:40][350915069826373][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 16:13:40][350915069826373][398 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:13:40][350915069826373][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915069826373\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7957\"}'\'' -e'"" [2025-09-08 16:13:40][350915069826373][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:13:40][350915069826373][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915069826373\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7957\"}'\'' -e'"" [2025-09-08 16:13:43][350915069826373][3709 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_915c6d39-ab8f-4b12-9465-3756acec3f7e","id":"QR_915c6d39-ab8f-4b12-9465-3756acec3f7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:13:43][350915069826373][3866 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=3343 [2025-09-08 16:13:43][350915069826373][3866 ms][DEBUG] END runCmdUntilRes#1 in 3467 ms [2025-09-08 16:13:43][350915069826373][3866 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:17:04][354068196423437][1 ms][INFO] === Request start === [2025-09-08 16:17:04][354068196423437][1 ms][DEBUG] START check_scloud [2025-09-08 16:17:04][354068196423437][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:17:04][354068196423437][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 16482 15610 23947092 160448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:17:04][354068196423437][300 ms][DEBUG] targetPkg: running [2025-09-08 16:17:04][354068196423437][300 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 16:17:04][354068196423437][300 ms][DEBUG] START check_boot_completed [2025-09-08 16:17:04][354068196423437][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:17:04][354068196423437][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:17:04][354068196423437][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:17:04][354068196423437][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:17:04][354068196423437][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 16:17:04][354068196423437][393 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:17:04][354068196423437][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068196423437\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6548\"}'\'' -e'"" [2025-09-08 16:17:04][354068196423437][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:17:04][354068196423437][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068196423437\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6548\"}'\'' -e'"" [2025-09-08 16:17:09][354068196423437][5189 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e310fcd4-7559-4077-ae62-5a36ac0852a1","id":"QR_e310fcd4-7559-4077-ae62-5a36ac0852a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:17:09][354068196423437][5345 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-09-08 16:17:09][354068196423437][5345 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-08 16:17:09][354068196423437][5345 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:17:11][354068196423437][0 ms][INFO] === Request start === [2025-09-08 16:17:11][354068196423437][1 ms][DEBUG] START check_scloud [2025-09-08 16:17:11][354068196423437][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:17:12][354068196423437][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 16482 15610 24114140 171240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:17:12][354068196423437][304 ms][DEBUG] targetPkg: running [2025-09-08 16:17:12][354068196423437][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 16:17:12][354068196423437][304 ms][DEBUG] START check_boot_completed [2025-09-08 16:17:12][354068196423437][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:17:12][354068196423437][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:17:12][354068196423437][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:17:12][354068196423437][399 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 16:17:12][354068196423437][400 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 16:17:12][354068196423437][400 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:17:12][354068196423437][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068196423437\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3905\"}'\'' -e'"" [2025-09-08 16:17:12][354068196423437][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:17:12][354068196423437][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068196423437\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3905\"}'\'' -e'"" [2025-09-08 16:17:17][354068196423437][5287 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99341abd-0e55-46fc-b460-4e19864bf85f","id":"QR_99341abd-0e55-46fc-b460-4e19864bf85f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:17:17][354068196423437][5443 ms][DEBUG] proc_open done in 5043 ms; code=255; res.len=3343 [2025-09-08 16:17:17][354068196423437][5443 ms][DEBUG] END runCmdUntilRes#1 in 5044 ms [2025-09-08 16:17:17][354068196423437][5444 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:19:03][353372915263525][0 ms][INFO] === Request start === [2025-09-08 16:19:03][353372915263525][1 ms][DEBUG] START check_scloud [2025-09-08 16:19:03][353372915263525][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:19:03][353372915263525][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 16482 15610 24236188 183260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:19:03][353372915263525][303 ms][DEBUG] targetPkg: running [2025-09-08 16:19:03][353372915263525][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 16:19:03][353372915263525][303 ms][DEBUG] START check_boot_completed [2025-09-08 16:19:03][353372915263525][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:19:03][353372915263525][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:19:03][353372915263525][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:19:03][353372915263525][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:19:03][353372915263525][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 16:19:03][353372915263525][381 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:19:03][353372915263525][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372915263525\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3376\"}'\'' -e'"" [2025-09-08 16:19:03][353372915263525][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:19:03][353372915263525][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372915263525\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3376\"}'\'' -e'"" [2025-09-08 16:19:09][353372915263525][5755 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73732838-73bd-42d8-8466-02e6aae8be10","id":"QR_73732838-73bd-42d8-8466-02e6aae8be10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:19:09][353372915263525][5911 ms][DEBUG] proc_open done in 5530 ms; code=255; res.len=3343 [2025-09-08 16:19:09][353372915263525][5911 ms][DEBUG] END runCmdUntilRes#1 in 5530 ms [2025-09-08 16:19:09][353372915263525][5911 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:19:11][353372915263525][1 ms][INFO] === Request start === [2025-09-08 16:19:11][353372915263525][1 ms][DEBUG] START check_scloud [2025-09-08 16:19:11][353372915263525][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:19:12][353372915263525][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 16482 15610 24378788 194200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:19:12][353372915263525][290 ms][DEBUG] targetPkg: running [2025-09-08 16:19:12][353372915263525][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 16:19:12][353372915263525][290 ms][DEBUG] START check_boot_completed [2025-09-08 16:19:12][353372915263525][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:19:12][353372915263525][337 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:19:12][353372915263525][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:19:12][353372915263525][399 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:19:12][353372915263525][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:19:12][353372915263525][399 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:19:12][353372915263525][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372915263525\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6743\"}'\'' -e'"" [2025-09-08 16:19:12][353372915263525][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:19:12][353372915263525][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372915263525\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6743\"}'\'' -e'"" [2025-09-08 16:19:17][353372915263525][5695 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_351eb5af-9060-4f37-b96f-02918e1f89cb","id":"QR_351eb5af-9060-4f37-b96f-02918e1f89cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:19:17][353372915263525][5851 ms][DEBUG] proc_open done in 5452 ms; code=255; res.len=3343 [2025-09-08 16:19:17][353372915263525][5851 ms][DEBUG] END runCmdUntilRes#1 in 5452 ms [2025-09-08 16:19:17][353372915263525][5851 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:20:03][354656350216777][0 ms][INFO] === Request start === [2025-09-08 16:20:03][354656350216777][1 ms][DEBUG] START check_scloud [2025-09-08 16:20:03][354656350216777][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:20:03][354656350216777][285 ms][DEBUG] SU: done in 285 ms; outu0_a118 16482 15610 24465828 206448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:20:03][354656350216777][285 ms][DEBUG] targetPkg: running [2025-09-08 16:20:03][354656350216777][285 ms][DEBUG] END check_scloud in 285 ms [2025-09-08 16:20:03][354656350216777][285 ms][DEBUG] START check_boot_completed [2025-09-08 16:20:03][354656350216777][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:20:03][354656350216777][317 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:20:03][354656350216777][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:20:03][354656350216777][379 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:20:03][354656350216777][379 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:20:03][354656350216777][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:20:03][354656350216777][504 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6103\nsuccessfulTxPacketsPerSecond: 0.6143526051871285\nretriedTxPackets: 1422\nretriedTxPacketsPerSecond: 0.13615382060903927\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5442\nsuccessfulRxPacketsPerSecond: 0.5446152824361571\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:20:03][354656350216777][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:20:05][354656350216777][1928 ms][DEBUG] SU: done in 1423 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.565/202.565/202.565/0.000 ms\n [2025-09-08 16:20:05][354656350216777][1928 ms][DEBUG] check_internet: online [2025-09-08 16:20:05][354656350216777][1928 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:20:05][354656350216777][1928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354656350216777\",\"model\":\"SM-S901E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8204\"}'\'' -e'"" [2025-09-08 16:20:05][354656350216777][1928 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:20:05][354656350216777][1928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354656350216777\",\"model\":\"SM-S901E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8204\"}'\'' -e'"" [2025-09-08 16:20:09][354656350216777][6112 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_468f7559-05f8-463b-8912-ab8cfe6715b3","id":"QR_468f7559-05f8-463b-8912-ab8cfe6715b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:20:09][354656350216777][6268 ms][DEBUG] proc_open done in 4340 ms; code=255; res.len=3343 [2025-09-08 16:20:09][354656350216777][6269 ms][DEBUG] END runCmdUntilRes#1 in 4341 ms [2025-09-08 16:20:09][354656350216777][6269 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:20:11][354656350216777][0 ms][INFO] === Request start === [2025-09-08 16:20:11][354656350216777][1 ms][DEBUG] START check_scloud [2025-09-08 16:20:11][354656350216777][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:20:12][354656350216777][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 16482 15610 24635052 217124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:20:12][354656350216777][271 ms][DEBUG] targetPkg: running [2025-09-08 16:20:12][354656350216777][271 ms][DEBUG] END check_scloud in 270 ms [2025-09-08 16:20:12][354656350216777][271 ms][DEBUG] START check_boot_completed [2025-09-08 16:20:12][354656350216777][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:20:12][354656350216777][318 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:20:12][354656350216777][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:20:12][354656350216777][380 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:20:12][354656350216777][380 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:20:12][354656350216777][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:20:12][354656350216777][505 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6103\nsuccessfulTxPacketsPerSecond: 0.6143526051871285\nretriedTxPackets: 1422\nretriedTxPacketsPerSecond: 0.13615382060903927\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5442\nsuccessfulRxPacketsPerSecond: 0.5446152824361571\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:20:12][354656350216777][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:20:12][354656350216777][802 ms][DEBUG] SU: done in 296 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=167 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 167.538/167.538/167.538/0.000 ms\n [2025-09-08 16:20:12][354656350216777][802 ms][DEBUG] check_internet: online [2025-09-08 16:20:12][354656350216777][802 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:20:12][354656350216777][802 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354656350216777\",\"model\":\"SM-S901E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1176\"}'\'' -e'"" [2025-09-08 16:20:12][354656350216777][802 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:20:12][354656350216777][802 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354656350216777\",\"model\":\"SM-S901E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1176\"}'\'' -e'"" [2025-09-08 16:20:17][354656350216777][5707 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_566552f3-6f3f-4bed-bf20-dc51ef1d586e","id":"QR_566552f3-6f3f-4bed-bf20-dc51ef1d586e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:20:17][354656350216777][5863 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-08 16:20:17][354656350216777][5863 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-09-08 16:20:17][354656350216777][5863 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:20:22][359944695338281][0 ms][INFO] === Request start === [2025-09-08 16:20:22][359944695338281][1 ms][DEBUG] START check_scloud [2025-09-08 16:20:22][359944695338281][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:20:22][359944695338281][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 16482 15610 24789812 229184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:20:22][359944695338281][310 ms][DEBUG] targetPkg: running [2025-09-08 16:20:22][359944695338281][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 16:20:22][359944695338281][311 ms][DEBUG] START check_boot_completed [2025-09-08 16:20:22][359944695338281][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:20:22][359944695338281][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:20:22][359944695338281][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:20:22][359944695338281][435 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 16:20:22][359944695338281][435 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 16:20:22][359944695338281][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:20:22][359944695338281][560 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6103\nsuccessfulTxPacketsPerSecond: 0.6143526051871285\nretriedTxPackets: 1422\nretriedTxPacketsPerSecond: 0.13615382060903927\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5442\nsuccessfulRxPacketsPerSecond: 0.5446152824361571\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:20:22][359944695338281][561 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:20:23][359944695338281][951 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.075/258.075/258.075/0.000 ms\n [2025-09-08 16:20:23][359944695338281][951 ms][DEBUG] check_internet: online [2025-09-08 16:20:23][359944695338281][951 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:20:23][359944695338281][951 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944695338281\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6325\"}'\'' -e'"" [2025-09-08 16:20:23][359944695338281][951 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:20:23][359944695338281][951 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944695338281\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6325\"}'\'' -e'"" [2025-09-08 16:20:26][359944695338281][4294 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dee4b4eb-e47e-4dfd-b2f7-be9ff7d59101","id":"QR_dee4b4eb-e47e-4dfd-b2f7-be9ff7d59101","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:20:26][359944695338281][4450 ms][DEBUG] proc_open done in 3498 ms; code=255; res.len=3343 [2025-09-08 16:20:26][359944695338281][4450 ms][DEBUG] END runCmdUntilRes#1 in 3498 ms [2025-09-08 16:20:26][359944695338281][4450 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:20:28][359944695338281][0 ms][INFO] === Request start === [2025-09-08 16:20:28][359944695338281][1 ms][DEBUG] START check_scloud [2025-09-08 16:20:28][359944695338281][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:20:29][359944695338281][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 16482 15610 24903708 241192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:20:29][359944695338281][259 ms][DEBUG] targetPkg: running [2025-09-08 16:20:29][359944695338281][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-08 16:20:29][359944695338281][259 ms][DEBUG] START check_boot_completed [2025-09-08 16:20:29][359944695338281][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:20:29][359944695338281][306 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:20:29][359944695338281][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:20:29][359944695338281][368 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:20:29][359944695338281][368 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:20:29][359944695338281][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:20:29][359944695338281][493 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6103\nsuccessfulTxPacketsPerSecond: 0.6143526051871285\nretriedTxPackets: 1422\nretriedTxPacketsPerSecond: 0.13615382060903927\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5442\nsuccessfulRxPacketsPerSecond: 0.5446152824361571\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:20:29][359944695338281][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:20:29][359944695338281][805 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.055/202.055/202.055/0.000 ms\n [2025-09-08 16:20:29][359944695338281][805 ms][DEBUG] check_internet: online [2025-09-08 16:20:29][359944695338281][805 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:20:29][359944695338281][805 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944695338281\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7420\"}'\'' -e'"" [2025-09-08 16:20:29][359944695338281][805 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:20:29][359944695338281][805 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944695338281\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7420\"}'\'' -e'"" [2025-09-08 16:20:33][359944695338281][4648 ms][DEBUG] proc_open done in 3843 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 16:20:33][359944695338281][4649 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-09-08 16:20:33][359944695338281][4649 ms][WARN] Detected error: Process with pid 16482 either refused to load frida-agent, or terminated during injectionProcess with pid 16482 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 16:20:33][359944695338281][4649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 16:20:33][359944695338281][4930 ms][DEBUG] SU: done in 281 ms; outsystem 15808 15610 12697276 188128 ep_poll 0 S system_server\n [2025-09-08 16:20:33][359944695338281][4930 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 16:20:33][359944695338281][5070 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 16:20:33][359944695338281][5070 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 16:20:33][359944695338281][5070 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 16:20:34][359944695338281][5195 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 16:20:34][359944695338281][5195 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 16:20:34][359944695338281][5367 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 16:20:36][359944695338281][7382 ms][DEBUG] START check_boot_completed [2025-09-08 16:20:36][359944695338281][7382 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:20:36][359944695338281][7429 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:20:36][359944695338281][7429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:20:36][359944695338281][7476 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:20:36][359944695338281][7476 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:20:39][359944695338281][10490 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 16:20:39][359944695338281][10491 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359944695338281\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7420\"}'\'' -e'"" [2025-09-08 16:20:43][359944695338281][15068 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6bd76174-74ef-4f28-9f21-3805641cfa19","id":"QR_6bd76174-74ef-4f28-9f21-3805641cfa19","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:20:44][359944695338281][15224 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-08 16:20:44][359944695338281][15224 ms][DEBUG] END runCmdUntilRes#2 in 4733 ms [2025-09-08 16:20:44][359944695338281][15224 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:24:04][350116461496986][1 ms][INFO] === Request start === [2025-09-08 16:24:04][350116461496986][1 ms][DEBUG] START check_scloud [2025-09-08 16:24:04][350116461496986][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:24:04][350116461496986][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 18343 15610 23583656 126308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:24:04][350116461496986][309 ms][DEBUG] targetPkg: running [2025-09-08 16:24:04][350116461496986][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 16:24:04][350116461496986][309 ms][DEBUG] START check_boot_completed [2025-09-08 16:24:04][350116461496986][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:24:04][350116461496986][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:24:04][350116461496986][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:24:05][350116461496986][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:24:05][350116461496986][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:24:05][350116461496986][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:24:05][350116461496986][528 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6337\nsuccessfulTxPacketsPerSecond: 1.006030236015554\nretriedTxPackets: 1487\nretriedTxPacketsPerSecond: 0.2743719529155516\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5640\nsuccessfulRxPacketsPerSecond: 0.9450574074981266\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:24:05][350116461496986][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:24:05][350116461496986][824 ms][DEBUG] SU: done in 296 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.581/202.581/202.581/0.000 ms\n [2025-09-08 16:24:05][350116461496986][824 ms][DEBUG] check_internet: online [2025-09-08 16:24:05][350116461496986][824 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:24:05][350116461496986][824 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350116461496986\",\"model\":\"SM-M526B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7658\"}'\'' -e'"" [2025-09-08 16:24:05][350116461496986][824 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:24:05][350116461496986][824 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350116461496986\",\"model\":\"SM-M526B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7658\"}'\'' -e'"" [2025-09-08 16:24:14][350116461496986][9682 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6681d85a-5ef9-436e-9b7e-001a7e7037b7","id":"QR_6681d85a-5ef9-436e-9b7e-001a7e7037b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:24:14][350116461496986][9838 ms][DEBUG] proc_open done in 9013 ms; code=255; res.len=3343 [2025-09-08 16:24:14][350116461496986][9838 ms][DEBUG] END runCmdUntilRes#1 in 9013 ms [2025-09-08 16:24:14][350116461496986][9838 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:24:17][350116461496986][0 ms][INFO] === Request start === [2025-09-08 16:24:17][350116461496986][1 ms][DEBUG] START check_scloud [2025-09-08 16:24:17][350116461496986][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:24:18][350116461496986][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 18343 15610 23713776 136868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:24:18][350116461496986][308 ms][DEBUG] targetPkg: running [2025-09-08 16:24:18][350116461496986][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 16:24:18][350116461496986][308 ms][DEBUG] START check_boot_completed [2025-09-08 16:24:18][350116461496986][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:24:18][350116461496986][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:24:18][350116461496986][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:24:18][350116461496986][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:24:18][350116461496986][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 16:24:18][350116461496986][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:24:18][350116461496986][511 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6337\nsuccessfulTxPacketsPerSecond: 1.006030236015554\nretriedTxPackets: 1487\nretriedTxPacketsPerSecond: 0.2743719529155516\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5640\nsuccessfulRxPacketsPerSecond: 0.9450574074981266\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:24:18][350116461496986][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:24:19][350116461496986][1120 ms][DEBUG] SU: done in 609 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=109 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.148/202.148/202.148/0.000 ms\n [2025-09-08 16:24:19][350116461496986][1120 ms][DEBUG] check_internet: online [2025-09-08 16:24:19][350116461496986][1120 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:24:19][350116461496986][1121 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350116461496986\",\"model\":\"SM-M526B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7938\"}'\'' -e'"" [2025-09-08 16:24:19][350116461496986][1121 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:24:19][350116461496986][1121 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350116461496986\",\"model\":\"SM-M526B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7938\"}'\'' -e'"" [2025-09-08 16:24:22][350116461496986][4869 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5353da2d-525f-4b67-bd42-58f33b491d01","id":"QR_5353da2d-525f-4b67-bd42-58f33b491d01","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:24:22][350116461496986][5025 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=3343 [2025-09-08 16:24:22][350116461496986][5025 ms][DEBUG] END runCmdUntilRes#1 in 3904 ms [2025-09-08 16:24:22][350116461496986][5025 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:25:03][354068192992153][0 ms][INFO] === Request start === [2025-09-08 16:25:03][354068192992153][1 ms][DEBUG] START check_scloud [2025-09-08 16:25:03][354068192992153][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:25:03][354068192992153][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 18343 15610 23810224 148760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:25:03][354068192992153][311 ms][DEBUG] targetPkg: running [2025-09-08 16:25:03][354068192992153][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 16:25:03][354068192992153][311 ms][DEBUG] START check_boot_completed [2025-09-08 16:25:03][354068192992153][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:25:03][354068192992153][356 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 16:25:03][354068192992153][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:25:03][354068192992153][419 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 16:25:03][354068192992153][419 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 16:25:03][354068192992153][419 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:25:03][354068192992153][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068192992153\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7680\"}'\'' -e'"" [2025-09-08 16:25:03][354068192992153][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:25:03][354068192992153][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068192992153\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7680\"}'\'' -e'"" [2025-09-08 16:25:06][354068192992153][3730 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_543509d5-ca0b-497d-b2a3-25b3c587576a","id":"QR_543509d5-ca0b-497d-b2a3-25b3c587576a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:25:06][354068192992153][3887 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=3343 [2025-09-08 16:25:06][354068192992153][3887 ms][DEBUG] END runCmdUntilRes#1 in 3467 ms [2025-09-08 16:25:06][354068192992153][3887 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:25:09][354068192992153][0 ms][INFO] === Request start === [2025-09-08 16:25:09][354068192992153][1 ms][DEBUG] START check_scloud [2025-09-08 16:25:09][354068192992153][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:25:09][354068192992153][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 18343 15610 23949680 159820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:25:09][354068192992153][315 ms][DEBUG] targetPkg: running [2025-09-08 16:25:09][354068192992153][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 16:25:09][354068192992153][315 ms][DEBUG] START check_boot_completed [2025-09-08 16:25:09][354068192992153][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:25:09][354068192992153][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:25:09][354068192992153][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:25:09][354068192992153][410 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 16:25:09][354068192992153][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 16:25:09][354068192992153][410 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:25:09][354068192992153][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068192992153\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5777\"}'\'' -e'"" [2025-09-08 16:25:09][354068192992153][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:25:09][354068192992153][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068192992153\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5777\"}'\'' -e'"" [2025-09-08 16:25:15][354068192992153][6266 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c08b5bd4-de47-45f8-9116-5a05b9b5f887","id":"QR_c08b5bd4-de47-45f8-9116-5a05b9b5f887","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:25:15][354068192992153][6422 ms][DEBUG] proc_open done in 6012 ms; code=255; res.len=3343 [2025-09-08 16:25:15][354068192992153][6422 ms][DEBUG] END runCmdUntilRes#1 in 6012 ms [2025-09-08 16:25:15][354068192992153][6422 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:25:21][356722917278094][0 ms][INFO] === Request start === [2025-09-08 16:25:21][356722917278094][1 ms][DEBUG] START check_scloud [2025-09-08 16:25:21][356722917278094][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:25:21][356722917278094][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 18343 15610 24094328 171636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:25:21][356722917278094][308 ms][DEBUG] targetPkg: running [2025-09-08 16:25:21][356722917278094][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 16:25:21][356722917278094][308 ms][DEBUG] START check_boot_completed [2025-09-08 16:25:21][356722917278094][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:25:21][356722917278094][353 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 16:25:21][356722917278094][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:25:21][356722917278094][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:25:21][356722917278094][400 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 16:25:21][356722917278094][400 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:25:21][356722917278094][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722917278094\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3429\"}'\'' -e'"" [2025-09-08 16:25:21][356722917278094][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:25:21][356722917278094][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722917278094\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3429\"}'\'' -e'"" [2025-09-08 16:25:26][356722917278094][4852 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9bde55ce-f50f-49f2-aec1-ad758b5e0e7a","id":"QR_9bde55ce-f50f-49f2-aec1-ad758b5e0e7a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:25:26][356722917278094][5008 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-08 16:25:26][356722917278094][5008 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-08 16:25:26][356722917278094][5009 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:25:29][356722917278094][0 ms][INFO] === Request start === [2025-09-08 16:25:29][356722917278094][1 ms][DEBUG] START check_scloud [2025-09-08 16:25:29][356722917278094][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:25:30][356722917278094][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 18343 15610 24244892 182544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:25:30][356722917278094][314 ms][DEBUG] targetPkg: running [2025-09-08 16:25:30][356722917278094][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 16:25:30][356722917278094][314 ms][DEBUG] START check_boot_completed [2025-09-08 16:25:30][356722917278094][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:25:30][356722917278094][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:25:30][356722917278094][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:25:30][356722917278094][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:25:30][356722917278094][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:25:30][356722917278094][408 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:25:30][356722917278094][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722917278094\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3529\"}'\'' -e'"" [2025-09-08 16:25:30][356722917278094][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:25:30][356722917278094][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722917278094\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3529\"}'\'' -e'"" [2025-09-08 16:25:34][356722917278094][4531 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0bb33a82-89b3-436a-a3cf-c7ed93a92455","id":"QR_0bb33a82-89b3-436a-a3cf-c7ed93a92455","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:25:34][356722917278094][4688 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-09-08 16:25:34][356722917278094][4688 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-09-08 16:25:34][356722917278094][4688 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:27:03][354566511109102][1 ms][INFO] === Request start === [2025-09-08 16:27:03][354566511109102][1 ms][DEBUG] START check_scloud [2025-09-08 16:27:03][354566511109102][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:27:04][354566511109102][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18343 15610 24337108 194920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:27:04][354566511109102][307 ms][DEBUG] targetPkg: running [2025-09-08 16:27:04][354566511109102][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 16:27:04][354566511109102][307 ms][DEBUG] START check_boot_completed [2025-09-08 16:27:04][354566511109102][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:27:04][354566511109102][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:27:04][354566511109102][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:27:04][354566511109102][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:27:04][354566511109102][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 16:27:04][354566511109102][401 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:27:04][354566511109102][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354566511109102\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5973\"}'\'' -e'"" [2025-09-08 16:27:04][354566511109102][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:27:04][354566511109102][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354566511109102\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5973\"}'\'' -e'"" [2025-09-08 16:27:09][354566511109102][5853 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f339fbb-31d7-48ce-b3af-933b3c684dac","id":"QR_1f339fbb-31d7-48ce-b3af-933b3c684dac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:27:09][354566511109102][6009 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-09-08 16:27:09][354566511109102][6009 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-08 16:27:09][354566511109102][6009 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:27:12][354566511109102][0 ms][INFO] === Request start === [2025-09-08 16:27:12][354566511109102][1 ms][DEBUG] START check_scloud [2025-09-08 16:27:12][354566511109102][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:27:12][354566511109102][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 18343 15610 24497500 205828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:27:12][354566511109102][304 ms][DEBUG] targetPkg: running [2025-09-08 16:27:12][354566511109102][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 16:27:12][354566511109102][304 ms][DEBUG] START check_boot_completed [2025-09-08 16:27:12][354566511109102][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:27:12][354566511109102][333 ms][DEBUG] ADB: done in 29 ms; out [2025-09-08 16:27:12][354566511109102][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:27:12][354566511109102][395 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:27:12][354566511109102][395 ms][DEBUG] END check_boot_completed in 91 ms [2025-09-08 16:27:12][354566511109102][395 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:27:12][354566511109102][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354566511109102\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2275\"}'\'' -e'"" [2025-09-08 16:27:12][354566511109102][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:27:12][354566511109102][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354566511109102\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2275\"}'\'' -e'"" [2025-09-08 16:27:17][354566511109102][5019 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_040205a4-4cb6-4ac9-9b0a-51742744cb68","id":"QR_040205a4-4cb6-4ac9-9b0a-51742744cb68","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:27:17][354566511109102][5175 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-09-08 16:27:17][354566511109102][5175 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-08 16:27:17][354566511109102][5176 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:29:04][353684141132799][1 ms][INFO] === Request start === [2025-09-08 16:29:04][353684141132799][1 ms][DEBUG] START check_scloud [2025-09-08 16:29:04][353684141132799][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:29:04][353684141132799][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 18343 15610 24615452 216828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:29:04][353684141132799][269 ms][DEBUG] targetPkg: running [2025-09-08 16:29:04][353684141132799][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-08 16:29:04][353684141132799][269 ms][DEBUG] START check_boot_completed [2025-09-08 16:29:04][353684141132799][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:29:04][353684141132799][300 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:29:04][353684141132799][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:29:04][353684141132799][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:29:04][353684141132799][347 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 16:29:04][353684141132799][347 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:29:04][353684141132799][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141132799\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2593\"}'\'' -e'"" [2025-09-08 16:29:04][353684141132799][347 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:29:04][353684141132799][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141132799\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2593\"}'\'' -e'"" [2025-09-08 16:29:09][353684141132799][5080 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2800381f-a2c2-4182-a849-e4916099c669","id":"QR_2800381f-a2c2-4182-a849-e4916099c669","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:29:09][353684141132799][5236 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-08 16:29:09][353684141132799][5236 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-08 16:29:09][353684141132799][5236 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:29:11][353684141132799][0 ms][INFO] === Request start === [2025-09-08 16:29:11][353684141132799][1 ms][DEBUG] START check_scloud [2025-09-08 16:29:11][353684141132799][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:29:11][353684141132799][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 18343 15610 24749732 229032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:29:11][353684141132799][263 ms][DEBUG] targetPkg: running [2025-09-08 16:29:11][353684141132799][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-08 16:29:11][353684141132799][263 ms][DEBUG] START check_boot_completed [2025-09-08 16:29:11][353684141132799][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:29:11][353684141132799][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:29:11][353684141132799][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:29:11][353684141132799][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:29:11][353684141132799][357 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:29:11][353684141132799][357 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:29:11][353684141132799][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141132799\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5740\"}'\'' -e'"" [2025-09-08 16:29:11][353684141132799][357 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:29:11][353684141132799][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141132799\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5740\"}'\'' -e'"" [2025-09-08 16:29:16][353684141132799][4824 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c708e1b7-dabb-4363-8d94-2abdcac896e8","id":"QR_c708e1b7-dabb-4363-8d94-2abdcac896e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:29:16][353684141132799][4980 ms][DEBUG] proc_open done in 4623 ms; code=255; res.len=3343 [2025-09-08 16:29:16][353684141132799][4980 ms][DEBUG] END runCmdUntilRes#1 in 4623 ms [2025-09-08 16:29:16][353684141132799][4980 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:29:20][357967970746334][0 ms][INFO] === Request start === [2025-09-08 16:29:20][357967970746334][1 ms][DEBUG] START check_scloud [2025-09-08 16:29:20][357967970746334][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:29:21][357967970746334][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 18343 15610 24877872 240860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:29:21][357967970746334][301 ms][DEBUG] targetPkg: running [2025-09-08 16:29:21][357967970746334][301 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 16:29:21][357967970746334][301 ms][DEBUG] START check_boot_completed [2025-09-08 16:29:21][357967970746334][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:29:21][357967970746334][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:29:21][357967970746334][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:29:21][357967970746334][426 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 16:29:21][357967970746334][426 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 16:29:21][357967970746334][426 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:29:21][357967970746334][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970746334\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5396\"}'\'' -e'"" [2025-09-08 16:29:21][357967970746334][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:29:21][357967970746334][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970746334\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5396\"}'\'' -e'"" [2025-09-08 16:29:25][357967970746334][4222 ms][DEBUG] proc_open done in 3796 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 16:29:25][357967970746334][4222 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-09-08 16:29:25][357967970746334][4222 ms][WARN] Detected error: Process with pid 18343 either refused to load frida-agent, or terminated during injectionProcess with pid 18343 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 16:29:25][357967970746334][4222 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 16:29:25][357967970746334][4488 ms][DEBUG] SU: done in 266 ms; outsystem 15808 15610 12717496 186448 ep_poll 0 S system_server\n [2025-09-08 16:29:25][357967970746334][4488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 16:29:25][357967970746334][4612 ms][DEBUG] SU: done in 124 ms; out [2025-09-08 16:29:25][357967970746334][4612 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 16:29:25][357967970746334][4612 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 16:29:25][357967970746334][4722 ms][DEBUG] SU: done in 110 ms; out [2025-09-08 16:29:25][357967970746334][4722 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 16:29:25][357967970746334][4909 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 16:29:27][357967970746334][6924 ms][DEBUG] START check_boot_completed [2025-09-08 16:29:27][357967970746334][6924 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:29:27][357967970746334][6971 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:29:27][357967970746334][6971 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:29:27][357967970746334][7018 ms][DEBUG] SU: done in 46 ms; out [2025-09-08 16:29:27][357967970746334][7018 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:29:30][357967970746334][10033 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 16:29:30][357967970746334][10033 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970746334\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5396\"}'\'' -e'"" [2025-09-08 16:29:34][357967970746334][13392 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c10a4ca-386c-4707-b73c-020490f80175","id":"QR_9c10a4ca-386c-4707-b73c-020490f80175","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:29:34][357967970746334][13548 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=3343 [2025-09-08 16:29:34][357967970746334][13548 ms][DEBUG] END runCmdUntilRes#2 in 3515 ms [2025-09-08 16:29:34][357967970746334][13548 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:29:36][357967970746334][0 ms][INFO] === Request start === [2025-09-08 16:29:36][357967970746334][1 ms][DEBUG] START check_scloud [2025-09-08 16:29:36][357967970746334][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:29:37][357967970746334][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 19833 15610 23668448 123688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:29:37][357967970746334][270 ms][DEBUG] targetPkg: running [2025-09-08 16:29:37][357967970746334][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-08 16:29:37][357967970746334][270 ms][DEBUG] START check_boot_completed [2025-09-08 16:29:37][357967970746334][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:29:37][357967970746334][316 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:29:37][357967970746334][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:29:37][357967970746334][379 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:29:37][357967970746334][379 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:29:37][357967970746334][379 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:29:37][357967970746334][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970746334\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7931\"}'\'' -e'"" [2025-09-08 16:29:37][357967970746334][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:29:37][357967970746334][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970746334\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7931\"}'\'' -e'"" [2025-09-08 16:29:41][357967970746334][4846 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f46fdce-7dcb-4748-a64a-b64bb00faeed","id":"QR_7f46fdce-7dcb-4748-a64a-b64bb00faeed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:29:41][357967970746334][5003 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-09-08 16:29:41][357967970746334][5003 ms][DEBUG] END runCmdUntilRes#1 in 4624 ms [2025-09-08 16:29:41][357967970746334][5003 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:30:04][355213795193127][0 ms][INFO] === Request start === [2025-09-08 16:30:04][355213795193127][1 ms][DEBUG] START check_scloud [2025-09-08 16:30:04][355213795193127][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:30:04][355213795193127][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 19833 15610 23703100 137516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:30:04][355213795193127][315 ms][DEBUG] targetPkg: running [2025-09-08 16:30:04][355213795193127][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 16:30:04][355213795193127][315 ms][DEBUG] START check_boot_completed [2025-09-08 16:30:04][355213795193127][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:30:04][355213795193127][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:30:04][355213795193127][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:30:04][355213795193127][440 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 16:30:04][355213795193127][440 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 16:30:04][355213795193127][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:30:05][355213795193127][596 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6583\nsuccessfulTxPacketsPerSecond: 0.911512851960679\nretriedTxPackets: 1547\nretriedTxPacketsPerSecond: 0.22232020779528755\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5850\nsuccessfulRxPacketsPerSecond: 0.7781207272835065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:30:05][355213795193127][596 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:30:06][355213795193127][1877 ms][DEBUG] SU: done in 1281 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=109 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.699/198.699/198.699/0.000 ms\n [2025-09-08 16:30:06][355213795193127][1877 ms][DEBUG] check_internet: online [2025-09-08 16:30:06][355213795193127][1877 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:30:06][355213795193127][1877 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355213795193127\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4029\"}'\'' -e'"" [2025-09-08 16:30:06][355213795193127][1877 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:30:06][355213795193127][1877 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355213795193127\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4029\"}'\'' -e'"" [2025-09-08 16:30:10][355213795193127][6438 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88f45d54-0f32-4818-b05c-1658541035a4","id":"QR_88f45d54-0f32-4818-b05c-1658541035a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:30:11][355213795193127][6594 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-08 16:30:11][355213795193127][6594 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-09-08 16:30:11][355213795193127][6595 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:30:13][350013883606583][0 ms][INFO] === Request start === [2025-09-08 16:30:13][350013883606583][1 ms][DEBUG] START check_scloud [2025-09-08 16:30:13][350013883606583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:30:13][350013883606583][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 19833 15610 23857732 149140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:30:13][350013883606583][306 ms][DEBUG] targetPkg: running [2025-09-08 16:30:13][350013883606583][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 16:30:13][350013883606583][306 ms][DEBUG] START check_boot_completed [2025-09-08 16:30:13][350013883606583][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:30:13][350013883606583][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:30:13][350013883606583][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:30:13][350013883606583][431 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 16:30:13][350013883606583][431 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 16:30:13][350013883606583][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:30:13][350013883606583][556 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6583\nsuccessfulTxPacketsPerSecond: 0.911512851960679\nretriedTxPackets: 1547\nretriedTxPacketsPerSecond: 0.22232020779528755\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5850\nsuccessfulRxPacketsPerSecond: 0.7781207272835065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:30:13][350013883606583][556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:30:14][350013883606583][899 ms][DEBUG] SU: done in 343 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=109 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.683/199.683/199.683/0.000 ms\n [2025-09-08 16:30:14][350013883606583][899 ms][DEBUG] check_internet: online [2025-09-08 16:30:14][350013883606583][899 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:30:14][350013883606583][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883606583\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1798\"}'\'' -e'"" [2025-09-08 16:30:14][350013883606583][899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:30:14][350013883606583][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883606583\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1798\"}'\'' -e'"" [2025-09-08 16:30:17][350013883606583][4289 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb1d392a-c520-424c-956a-6ff5f2b27171","id":"QR_cb1d392a-c520-424c-956a-6ff5f2b27171","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:30:17][350013883606583][4445 ms][DEBUG] proc_open done in 3546 ms; code=255; res.len=3343 [2025-09-08 16:30:17][350013883606583][4445 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-08 16:30:17][350013883606583][4445 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:30:19][350048583412593][0 ms][INFO] === Request start === [2025-09-08 16:30:19][350048583412593][1 ms][DEBUG] START check_scloud [2025-09-08 16:30:19][350048583412593][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:30:20][350048583412593][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 19833 15610 24038212 160000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:30:20][350048583412593][259 ms][DEBUG] targetPkg: running [2025-09-08 16:30:20][350048583412593][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-08 16:30:20][350048583412593][259 ms][DEBUG] START check_boot_completed [2025-09-08 16:30:20][350048583412593][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:30:20][350048583412593][305 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:30:20][350048583412593][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:30:20][350048583412593][367 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:30:20][350048583412593][367 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 16:30:20][350048583412593][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:30:20][350048583412593][477 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6583\nsuccessfulTxPacketsPerSecond: 0.911512851960679\nretriedTxPackets: 1547\nretriedTxPacketsPerSecond: 0.22232020779528755\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5850\nsuccessfulRxPacketsPerSecond: 0.7781207272835065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:30:20][350048583412593][477 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:30:20][350048583412593][805 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=109 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.443/190.443/190.443/0.000 ms\n [2025-09-08 16:30:20][350048583412593][805 ms][DEBUG] check_internet: online [2025-09-08 16:30:20][350048583412593][805 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:30:20][350048583412593][805 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350048583412593\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8028\"}'\'' -e'"" [2025-09-08 16:30:20][350048583412593][805 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:30:20][350048583412593][805 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350048583412593\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8028\"}'\'' -e'"" [2025-09-08 16:30:24][350048583412593][4976 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_470e5ec3-0520-4431-8757-133da0801898","id":"QR_470e5ec3-0520-4431-8757-133da0801898","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:30:25][350048583412593][5132 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-09-08 16:30:25][350048583412593][5132 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-09-08 16:30:25][350048583412593][5132 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:30:27][354838356453147][0 ms][INFO] === Request start === [2025-09-08 16:30:27][354838356453147][1 ms][DEBUG] START check_scloud [2025-09-08 16:30:27][354838356453147][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:30:27][354838356453147][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 19833 15610 24182760 170492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:30:27][354838356453147][285 ms][DEBUG] targetPkg: running [2025-09-08 16:30:27][354838356453147][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-08 16:30:27][354838356453147][285 ms][DEBUG] START check_boot_completed [2025-09-08 16:30:27][354838356453147][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:30:27][354838356453147][331 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:30:27][354838356453147][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:30:27][354838356453147][409 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 16:30:27][354838356453147][410 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 16:30:27][354838356453147][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:30:27][354838356453147][534 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6583\nsuccessfulTxPacketsPerSecond: 0.911512851960679\nretriedTxPackets: 1547\nretriedTxPacketsPerSecond: 0.22232020779528755\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5850\nsuccessfulRxPacketsPerSecond: 0.7781207272835065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:30:27][354838356453147][534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:30:27][354838356453147][909 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=109 time=271 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 271.522/271.522/271.522/0.000 ms\n [2025-09-08 16:30:27][354838356453147][909 ms][DEBUG] check_internet: online [2025-09-08 16:30:27][354838356453147][909 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:30:27][354838356453147][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838356453147\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1088\"}'\'' -e'"" [2025-09-08 16:30:27][354838356453147][909 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:30:27][354838356453147][909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838356453147\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1088\"}'\'' -e'"" [2025-09-08 16:30:31][354838356453147][4362 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_513b2d0f-bbd0-46b5-ab38-b915517527f2","id":"QR_513b2d0f-bbd0-46b5-ab38-b915517527f2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:30:31][354838356453147][4518 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-08 16:30:31][354838356453147][4518 ms][DEBUG] END runCmdUntilRes#1 in 3609 ms [2025-09-08 16:30:31][354838356453147][4518 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:31:03][350074933983729][0 ms][INFO] === Request start === [2025-09-08 16:31:03][350074933983729][1 ms][DEBUG] START check_scloud [2025-09-08 16:31:03][350074933983729][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:31:04][350074933983729][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 19833 15610 24255492 182456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:31:04][350074933983729][301 ms][DEBUG] targetPkg: running [2025-09-08 16:31:04][350074933983729][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-08 16:31:04][350074933983729][301 ms][DEBUG] START check_boot_completed [2025-09-08 16:31:04][350074933983729][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:31:04][350074933983729][346 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 16:31:04][350074933983729][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:31:04][350074933983729][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:31:04][350074933983729][393 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 16:31:04][350074933983729][394 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:31:04][350074933983729][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350074933983729\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9239\"}'\'' -e'"" [2025-09-08 16:31:04][350074933983729][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:31:04][350074933983729][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350074933983729\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9239\"}'\'' -e'"" [2025-09-08 16:31:07][350074933983729][3767 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92364aa4-5eda-4f0c-86bd-9f2ca8a5b13e","id":"QR_92364aa4-5eda-4f0c-86bd-9f2ca8a5b13e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:31:07][350074933983729][3923 ms][DEBUG] proc_open done in 3529 ms; code=255; res.len=3343 [2025-09-08 16:31:07][350074933983729][3923 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-08 16:31:07][350074933983729][3923 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:31:10][350074933983729][1 ms][INFO] === Request start === [2025-09-08 16:31:10][350074933983729][1 ms][DEBUG] START check_scloud [2025-09-08 16:31:10][350074933983729][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:31:10][350074933983729][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 19833 15610 24410252 194228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:31:10][350074933983729][269 ms][DEBUG] targetPkg: running [2025-09-08 16:31:10][350074933983729][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-08 16:31:10][350074933983729][269 ms][DEBUG] START check_boot_completed [2025-09-08 16:31:10][350074933983729][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:31:10][350074933983729][316 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:31:10][350074933983729][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:31:10][350074933983729][363 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:31:10][350074933983729][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 16:31:10][350074933983729][363 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:31:10][350074933983729][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350074933983729\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4756\"}'\'' -e'"" [2025-09-08 16:31:10][350074933983729][363 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:31:10][350074933983729][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350074933983729\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4756\"}'\'' -e'"" [2025-09-08 16:31:16][350074933983729][6283 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_046dac8e-32da-4314-9986-50bc63c3519a","id":"QR_046dac8e-32da-4314-9986-50bc63c3519a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:31:16][350074933983729][6439 ms][DEBUG] proc_open done in 6077 ms; code=255; res.len=3343 [2025-09-08 16:31:16][350074933983729][6439 ms][DEBUG] END runCmdUntilRes#1 in 6077 ms [2025-09-08 16:31:16][350074933983729][6439 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:31:22][355738552667442][0 ms][INFO] === Request start === [2025-09-08 16:31:22][355738552667442][1 ms][DEBUG] START check_scloud [2025-09-08 16:31:22][355738552667442][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:31:22][355738552667442][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 19833 15610 24543692 205188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:31:22][355738552667442][316 ms][DEBUG] targetPkg: running [2025-09-08 16:31:22][355738552667442][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 16:31:22][355738552667442][316 ms][DEBUG] START check_boot_completed [2025-09-08 16:31:22][355738552667442][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:31:22][355738552667442][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:31:22][355738552667442][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:31:22][355738552667442][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:31:22][355738552667442][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 16:31:22][355738552667442][394 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:31:22][355738552667442][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738552667442\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9253\"}'\'' -e'"" [2025-09-08 16:31:22][355738552667442][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:31:22][355738552667442][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738552667442\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9253\"}'\'' -e'"" [2025-09-08 16:31:27][355738552667442][5096 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f165f6a2-8172-4206-8bfe-4610857a726d","id":"QR_f165f6a2-8172-4206-8bfe-4610857a726d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:31:27][355738552667442][5252 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-08 16:31:27][355738552667442][5252 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-08 16:31:27][355738552667442][5252 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:31:30][355738552667442][0 ms][INFO] === Request start === [2025-09-08 16:31:30][355738552667442][1 ms][DEBUG] START check_scloud [2025-09-08 16:31:30][355738552667442][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:31:31][355738552667442][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 19833 15610 24640036 216068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:31:31][355738552667442][264 ms][DEBUG] targetPkg: running [2025-09-08 16:31:31][355738552667442][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-08 16:31:31][355738552667442][264 ms][DEBUG] START check_boot_completed [2025-09-08 16:31:31][355738552667442][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:31:31][355738552667442][311 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:31:31][355738552667442][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:31:31][355738552667442][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:31:31][355738552667442][357 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 16:31:31][355738552667442][358 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:31:31][355738552667442][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738552667442\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7097\"}'\'' -e'"" [2025-09-08 16:31:31][355738552667442][358 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:31:31][355738552667442][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738552667442\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7097\"}'\'' -e'"" [2025-09-08 16:31:35][355738552667442][4231 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f9d0931-0570-47a2-9ddd-2b53640b07fe","id":"QR_2f9d0931-0570-47a2-9ddd-2b53640b07fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:31:35][355738552667442][4388 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-08 16:31:35][355738552667442][4388 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-08 16:31:35][355738552667442][4388 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:32:03][357211246034054][0 ms][INFO] === Request start === [2025-09-08 16:32:03][357211246034054][1 ms][DEBUG] START check_scloud [2025-09-08 16:32:03][357211246034054][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:32:03][357211246034054][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 19833 15610 24735296 228360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:32:03][357211246034054][289 ms][DEBUG] targetPkg: running [2025-09-08 16:32:03][357211246034054][289 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 16:32:03][357211246034054][289 ms][DEBUG] START check_boot_completed [2025-09-08 16:32:03][357211246034054][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:32:03][357211246034054][320 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:32:03][357211246034054][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:32:03][357211246034054][383 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 16:32:03][357211246034054][383 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:32:03][357211246034054][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:32:04][357211246034054][524 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6583\nsuccessfulTxPacketsPerSecond: 0.911512851960679\nretriedTxPackets: 1547\nretriedTxPacketsPerSecond: 0.22232020779528755\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5850\nsuccessfulRxPacketsPerSecond: 0.7781207272835065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:32:04][357211246034054][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:32:04][357211246034054][899 ms][DEBUG] SU: done in 374 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=109 time=229 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 229.634/229.634/229.634/0.000 ms\n [2025-09-08 16:32:04][357211246034054][899 ms][DEBUG] check_internet: online [2025-09-08 16:32:04][357211246034054][899 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:32:04][357211246034054][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211246034054\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8564\"}'\'' -e'"" [2025-09-08 16:32:04][357211246034054][899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:32:04][357211246034054][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211246034054\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8564\"}'\'' -e'"" [2025-09-08 16:32:07][357211246034054][4351 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_87f9852d-ae20-4f03-bfc8-74b6645b87c3","id":"QR_87f9852d-ae20-4f03-bfc8-74b6645b87c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:32:08][357211246034054][4507 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-08 16:32:08][357211246034054][4507 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-08 16:32:08][357211246034054][4507 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:32:10][357211246034054][0 ms][INFO] === Request start === [2025-09-08 16:32:10][357211246034054][1 ms][DEBUG] START check_scloud [2025-09-08 16:32:10][357211246034054][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:32:10][357211246034054][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 19833 15610 24910664 240180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:32:10][357211246034054][262 ms][DEBUG] targetPkg: running [2025-09-08 16:32:10][357211246034054][262 ms][DEBUG] END check_scloud in 262 ms [2025-09-08 16:32:10][357211246034054][262 ms][DEBUG] START check_boot_completed [2025-09-08 16:32:10][357211246034054][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:32:10][357211246034054][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:32:10][357211246034054][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:32:10][357211246034054][357 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 16:32:10][357211246034054][357 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 16:32:10][357211246034054][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:32:10][357211246034054][481 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6583\nsuccessfulTxPacketsPerSecond: 0.911512851960679\nretriedTxPackets: 1547\nretriedTxPacketsPerSecond: 0.22232020779528755\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5850\nsuccessfulRxPacketsPerSecond: 0.7781207272835065\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:32:10][357211246034054][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:32:11][357211246034054][871 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=109 time=282 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 282.043/282.043/282.043/0.000 ms\n [2025-09-08 16:32:11][357211246034054][871 ms][DEBUG] check_internet: online [2025-09-08 16:32:11][357211246034054][871 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:32:11][357211246034054][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211246034054\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1887\"}'\'' -e'"" [2025-09-08 16:32:11][357211246034054][871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:32:11][357211246034054][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211246034054\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1887\"}'\'' -e'"" [2025-09-08 16:32:14][357211246034054][4527 ms][DEBUG] proc_open done in 3655 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 16:32:14][357211246034054][4527 ms][DEBUG] END runCmdUntilRes#1 in 3656 ms [2025-09-08 16:32:14][357211246034054][4527 ms][WARN] Detected error: Process with pid 19833 either refused to load frida-agent, or terminated during injectionProcess with pid 19833 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 16:32:14][357211246034054][4527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 16:32:15][357211246034054][4808 ms][DEBUG] SU: done in 281 ms; outsystem 15808 15610 12717496 187172 ep_poll 0 S system_server\n [2025-09-08 16:32:15][357211246034054][4808 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 16:32:15][357211246034054][4948 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 16:32:15][357211246034054][4949 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 16:32:15][357211246034054][4949 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 16:32:15][357211246034054][5089 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 16:32:15][357211246034054][5089 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 16:32:15][357211246034054][5261 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 16:32:17][357211246034054][7276 ms][DEBUG] START check_boot_completed [2025-09-08 16:32:17][357211246034054][7276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:32:17][357211246034054][7323 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:32:17][357211246034054][7323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:32:17][357211246034054][7370 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:32:17][357211246034054][7370 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:32:20][357211246034054][10384 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 16:32:20][357211246034054][10385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211246034054\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1887\"}'\'' -e'"" [2025-09-08 16:32:26][357211246034054][15836 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_828b6af4-82c1-4cc8-9609-7a1e3b05af1e","id":"QR_828b6af4-82c1-4cc8-9609-7a1e3b05af1e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:32:26][357211246034054][15993 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-09-08 16:32:26][357211246034054][15993 ms][DEBUG] END runCmdUntilRes#2 in 5608 ms [2025-09-08 16:32:26][357211246034054][15993 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:35:04][356722911099827][1 ms][INFO] === Request start === [2025-09-08 16:35:04][356722911099827][1 ms][DEBUG] START check_scloud [2025-09-08 16:35:04][356722911099827][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:35:04][356722911099827][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 21693 15610 23541196 126828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:35:04][356722911099827][306 ms][DEBUG] targetPkg: running [2025-09-08 16:35:04][356722911099827][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 16:35:04][356722911099827][306 ms][DEBUG] START check_boot_completed [2025-09-08 16:35:04][356722911099827][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:35:04][356722911099827][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:35:04][356722911099827][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:35:04][356722911099827][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:35:04][356722911099827][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:35:04][356722911099827][400 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:35:04][356722911099827][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722911099827\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3648\"}'\'' -e'"" [2025-09-08 16:35:04][356722911099827][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:35:04][356722911099827][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722911099827\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3648\"}'\'' -e'"" [2025-09-08 16:35:09][356722911099827][5132 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d817bed3-7d73-4d29-a6c8-d823124ae05c","id":"QR_d817bed3-7d73-4d29-a6c8-d823124ae05c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:35:09][356722911099827][5289 ms][DEBUG] proc_open done in 4888 ms; code=255; res.len=3343 [2025-09-08 16:35:09][356722911099827][5289 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-08 16:35:09][356722911099827][5289 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:35:11][356722911099827][0 ms][INFO] === Request start === [2025-09-08 16:35:11][356722911099827][1 ms][DEBUG] START check_scloud [2025-09-08 16:35:11][356722911099827][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:35:12][356722911099827][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 21693 15610 23689940 137564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:35:12][356722911099827][316 ms][DEBUG] targetPkg: running [2025-09-08 16:35:12][356722911099827][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 16:35:12][356722911099827][317 ms][DEBUG] START check_boot_completed [2025-09-08 16:35:12][356722911099827][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:35:12][356722911099827][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:35:12][356722911099827][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:35:12][356722911099827][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:35:12][356722911099827][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:35:12][356722911099827][426 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:35:12][356722911099827][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722911099827\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1020\"}'\'' -e'"" [2025-09-08 16:35:12][356722911099827][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:35:12][356722911099827][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722911099827\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1020\"}'\'' -e'"" [2025-09-08 16:35:17][356722911099827][5143 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b4bbdd6-6d90-429a-8d0b-897b311bf51a","id":"QR_8b4bbdd6-6d90-429a-8d0b-897b311bf51a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:35:17][356722911099827][5299 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-09-08 16:35:17][356722911099827][5299 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-09-08 16:35:17][356722911099827][5299 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:36:03][351642484231679][0 ms][INFO] === Request start === [2025-09-08 16:36:03][351642484231679][1 ms][DEBUG] START check_scloud [2025-09-08 16:36:03][351642484231679][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:36:04][351642484231679][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 21693 15610 23836436 149576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:36:04][351642484231679][314 ms][DEBUG] targetPkg: running [2025-09-08 16:36:04][351642484231679][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 16:36:04][351642484231679][314 ms][DEBUG] START check_boot_completed [2025-09-08 16:36:04][351642484231679][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:36:04][351642484231679][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:36:04][351642484231679][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:36:04][351642484231679][409 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 16:36:04][351642484231679][409 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:36:04][351642484231679][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:36:04][351642484231679][519 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6977\nsuccessfulTxPacketsPerSecond: 1.3077796291747712\nretriedTxPackets: 1652\nretriedTxPacketsPerSecond: 0.348519951937439\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6184\nsuccessfulRxPacketsPerSecond: 1.108625370924806\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:36:04][351642484231679][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:36:06][351642484231679][2079 ms][DEBUG] SU: done in 1561 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.435/201.435/201.435/0.000 ms\n [2025-09-08 16:36:06][351642484231679][2080 ms][DEBUG] check_internet: online [2025-09-08 16:36:06][351642484231679][2080 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:36:06][351642484231679][2080 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642484231679\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8810\"}'\'' -e'"" [2025-09-08 16:36:06][351642484231679][2080 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:36:06][351642484231679][2080 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642484231679\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8810\"}'\'' -e'"" [2025-09-08 16:36:09][351642484231679][5735 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b4415ec-1e42-4e09-8ed4-87fac6f68aa9","id":"QR_4b4415ec-1e42-4e09-8ed4-87fac6f68aa9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:36:09][351642484231679][5891 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-08 16:36:09][351642484231679][5891 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-09-08 16:36:09][351642484231679][5891 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:36:12][351642484231679][0 ms][INFO] === Request start === [2025-09-08 16:36:12][351642484231679][1 ms][DEBUG] START check_scloud [2025-09-08 16:36:12][351642484231679][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:36:12][351642484231679][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 21693 15610 23994104 160408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:36:12][351642484231679][252 ms][DEBUG] targetPkg: running [2025-09-08 16:36:12][351642484231679][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-08 16:36:12][351642484231679][252 ms][DEBUG] START check_boot_completed [2025-09-08 16:36:12][351642484231679][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:36:12][351642484231679][283 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:36:12][351642484231679][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:36:12][351642484231679][330 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:36:12][351642484231679][330 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 16:36:12][351642484231679][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:36:12][351642484231679][439 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6977\nsuccessfulTxPacketsPerSecond: 1.3077796291747712\nretriedTxPackets: 1652\nretriedTxPacketsPerSecond: 0.348519951937439\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6184\nsuccessfulRxPacketsPerSecond: 1.108625370924806\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:36:12][351642484231679][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:36:12][351642484231679][721 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=167 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 167.519/167.519/167.519/0.000 ms\n [2025-09-08 16:36:12][351642484231679][721 ms][DEBUG] check_internet: online [2025-09-08 16:36:12][351642484231679][721 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:36:12][351642484231679][721 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642484231679\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4612\"}'\'' -e'"" [2025-09-08 16:36:12][351642484231679][721 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:36:12][351642484231679][721 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642484231679\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4612\"}'\'' -e'"" [2025-09-08 16:36:18][351642484231679][6125 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_95adc1b5-0a52-4d05-9bb4-da54374beaf6","id":"QR_95adc1b5-0a52-4d05-9bb4-da54374beaf6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:36:18][351642484231679][6282 ms][DEBUG] proc_open done in 5560 ms; code=255; res.len=3343 [2025-09-08 16:36:18][351642484231679][6282 ms][DEBUG] END runCmdUntilRes#1 in 5560 ms [2025-09-08 16:36:18][351642484231679][6282 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:39:04][350547664439052][1 ms][INFO] === Request start === [2025-09-08 16:39:04][350547664439052][1 ms][DEBUG] START check_scloud [2025-09-08 16:39:04][350547664439052][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:39:05][350547664439052][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 21693 15610 24145876 171876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:39:05][350547664439052][293 ms][DEBUG] targetPkg: running [2025-09-08 16:39:05][350547664439052][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-08 16:39:05][350547664439052][293 ms][DEBUG] START check_boot_completed [2025-09-08 16:39:05][350547664439052][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:39:05][350547664439052][324 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:39:05][350547664439052][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:39:05][350547664439052][387 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 16:39:05][350547664439052][387 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:39:05][350547664439052][387 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:39:05][350547664439052][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547664439052\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6928\"}'\'' -e'"" [2025-09-08 16:39:05][350547664439052][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:39:05][350547664439052][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547664439052\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6928\"}'\'' -e'"" [2025-09-08 16:39:11][350547664439052][6120 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27de20c5-0628-42fb-9aa9-7e4e31df8153","id":"QR_27de20c5-0628-42fb-9aa9-7e4e31df8153","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:39:11][350547664439052][6276 ms][DEBUG] proc_open done in 5889 ms; code=255; res.len=3343 [2025-09-08 16:39:11][350547664439052][6276 ms][DEBUG] END runCmdUntilRes#1 in 5889 ms [2025-09-08 16:39:11][350547664439052][6276 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:39:14][350547664439052][0 ms][INFO] === Request start === [2025-09-08 16:39:14][350547664439052][1 ms][DEBUG] START check_scloud [2025-09-08 16:39:14][350547664439052][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:39:15][350547664439052][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 21693 15610 24280156 183672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:39:15][350547664439052][304 ms][DEBUG] targetPkg: running [2025-09-08 16:39:15][350547664439052][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 16:39:15][350547664439052][304 ms][DEBUG] START check_boot_completed [2025-09-08 16:39:15][350547664439052][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:39:15][350547664439052][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:39:15][350547664439052][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:39:15][350547664439052][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:39:15][350547664439052][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:39:15][350547664439052][397 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:39:15][350547664439052][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547664439052\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3155\"}'\'' -e'"" [2025-09-08 16:39:15][350547664439052][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:39:15][350547664439052][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547664439052\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3155\"}'\'' -e'"" [2025-09-08 16:39:18][350547664439052][4006 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6733c021-5a1d-457a-ad3c-28a5b523b87f","id":"QR_6733c021-5a1d-457a-ad3c-28a5b523b87f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:39:18][350547664439052][4162 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-09-08 16:39:18][350547664439052][4162 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-08 16:39:18][350547664439052][4162 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:40:10][355738552667442][0 ms][INFO] === Request start === [2025-09-08 16:40:10][355738552667442][1 ms][DEBUG] START check_scloud [2025-09-08 16:40:10][355738552667442][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:40:10][355738552667442][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 21693 15610 24377500 194916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:40:10][355738552667442][300 ms][DEBUG] targetPkg: running [2025-09-08 16:40:10][355738552667442][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 16:40:10][355738552667442][300 ms][DEBUG] START check_boot_completed [2025-09-08 16:40:10][355738552667442][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:40:10][355738552667442][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:40:10][355738552667442][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:40:10][355738552667442][409 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:40:10][355738552667442][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:40:10][355738552667442][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:40:10][355738552667442][536 ms][DEBUG] SU: done in 127 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7130\nsuccessfulTxPacketsPerSecond: 0.8259421408636224\nretriedTxPackets: 1686\nretriedTxPacketsPerSecond: 0.18354269796969386\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6322\nsuccessfulRxPacketsPerSecond: 0.7449674211711104\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:40:10][355738552667442][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:40:11][355738552667442][878 ms][DEBUG] SU: done in 341 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=236 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 236.124/236.124/236.124/0.000 ms\n [2025-09-08 16:40:11][355738552667442][878 ms][DEBUG] check_internet: online [2025-09-08 16:40:11][355738552667442][878 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:40:11][355738552667442][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738552667442\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6251\"}'\'' -e'"" [2025-09-08 16:40:11][355738552667442][878 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:40:11][355738552667442][878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738552667442\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6251\"}'\'' -e'"" [2025-09-08 16:40:14][355738552667442][4033 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e515117c-f302-47bf-9334-5d5264da5fcc","id":"QR_e515117c-f302-47bf-9334-5d5264da5fcc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:40:14][355738552667442][4189 ms][DEBUG] proc_open done in 3311 ms; code=255; res.len=3343 [2025-09-08 16:40:14][355738552667442][4189 ms][DEBUG] END runCmdUntilRes#1 in 3311 ms [2025-09-08 16:40:14][355738552667442][4189 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:40:17][351488161120870][0 ms][INFO] === Request start === [2025-09-08 16:40:17][351488161120870][1 ms][DEBUG] START check_scloud [2025-09-08 16:40:17][351488161120870][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:40:18][351488161120870][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 21693 15610 24505636 206292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:40:18][351488161120870][313 ms][DEBUG] targetPkg: running [2025-09-08 16:40:18][351488161120870][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 16:40:18][351488161120870][313 ms][DEBUG] START check_boot_completed [2025-09-08 16:40:18][351488161120870][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:40:18][351488161120870][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:40:18][351488161120870][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:40:18][351488161120870][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:40:18][351488161120870][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 16:40:18][351488161120870][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:40:18][351488161120870][516 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7130\nsuccessfulTxPacketsPerSecond: 0.8259421408636224\nretriedTxPackets: 1686\nretriedTxPacketsPerSecond: 0.18354269796969386\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6322\nsuccessfulRxPacketsPerSecond: 0.7449674211711104\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:40:18][351488161120870][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:40:18][351488161120870][844 ms][DEBUG] SU: done in 327 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.766/218.766/218.766/0.000 ms\n [2025-09-08 16:40:18][351488161120870][844 ms][DEBUG] check_internet: online [2025-09-08 16:40:18][351488161120870][844 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:40:18][351488161120870][844 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351488161120870\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5304\"}'\'' -e'"" [2025-09-08 16:40:18][351488161120870][844 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:40:18][351488161120870][844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351488161120870\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5304\"}'\'' -e'"" [2025-09-08 16:40:25][351488161120870][7233 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec38f8d2-4d69-41ae-880d-c83e8cf4ce11","id":"QR_ec38f8d2-4d69-41ae-880d-c83e8cf4ce11","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:40:25][351488161120870][7389 ms][DEBUG] proc_open done in 6545 ms; code=255; res.len=3343 [2025-09-08 16:40:25][351488161120870][7389 ms][DEBUG] END runCmdUntilRes#1 in 6545 ms [2025-09-08 16:40:25][351488161120870][7389 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:40:28][351488161120870][0 ms][INFO] === Request start === [2025-09-08 16:40:28][351488161120870][1 ms][DEBUG] START check_scloud [2025-09-08 16:40:28][351488161120870][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:40:29][351488161120870][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 21693 15610 24646188 217016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:40:29][351488161120870][330 ms][DEBUG] targetPkg: running [2025-09-08 16:40:29][351488161120870][330 ms][DEBUG] END check_scloud in 330 ms [2025-09-08 16:40:29][351488161120870][330 ms][DEBUG] START check_boot_completed [2025-09-08 16:40:29][351488161120870][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:40:29][351488161120870][377 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:40:29][351488161120870][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:40:29][351488161120870][440 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 16:40:29][351488161120870][440 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 16:40:29][351488161120870][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:40:29][351488161120870][596 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7130\nsuccessfulTxPacketsPerSecond: 0.8259421408636224\nretriedTxPackets: 1686\nretriedTxPacketsPerSecond: 0.18354269796969386\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6322\nsuccessfulRxPacketsPerSecond: 0.7449674211711104\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:40:29][351488161120870][596 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:40:29][351488161120870][986 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.023/257.023/257.023/0.000 ms\n [2025-09-08 16:40:29][351488161120870][986 ms][DEBUG] check_internet: online [2025-09-08 16:40:29][351488161120870][986 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:40:29][351488161120870][986 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351488161120870\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5542\"}'\'' -e'"" [2025-09-08 16:40:29][351488161120870][987 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:40:29][351488161120870][987 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351488161120870\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5542\"}'\'' -e'"" [2025-09-08 16:40:33][351488161120870][4673 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4acd50e9-ef93-4a07-9ec0-1ea681371c2b","id":"QR_4acd50e9-ef93-4a07-9ec0-1ea681371c2b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:40:33][351488161120870][4829 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-09-08 16:40:33][351488161120870][4829 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-09-08 16:40:33][351488161120870][4829 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:41:07][352384579241110][1 ms][INFO] === Request start === [2025-09-08 16:41:07][352384579241110][1 ms][DEBUG] START check_scloud [2025-09-08 16:41:07][352384579241110][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:41:07][352384579241110][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 21693 15610 24787656 229112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:41:07][352384579241110][295 ms][DEBUG] targetPkg: running [2025-09-08 16:41:07][352384579241110][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-08 16:41:07][352384579241110][295 ms][DEBUG] START check_boot_completed [2025-09-08 16:41:07][352384579241110][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:41:07][352384579241110][342 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:41:07][352384579241110][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:41:07][352384579241110][436 ms][DEBUG] SU: done in 93 ms; out [2025-09-08 16:41:07][352384579241110][436 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 16:41:07][352384579241110][436 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:41:07][352384579241110][436 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384579241110\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2545\"}'\'' -e'"" [2025-09-08 16:41:07][352384579241110][436 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:41:07][352384579241110][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384579241110\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2545\"}'\'' -e'"" [2025-09-08 16:41:12][352384579241110][5216 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f713f5af-c0cd-4430-8e1a-309d376d3584","id":"QR_f713f5af-c0cd-4430-8e1a-309d376d3584","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:41:12][352384579241110][5372 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-08 16:41:12][352384579241110][5372 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-08 16:41:12][352384579241110][5372 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:43:03][351632918007555][0 ms][INFO] === Request start === [2025-09-08 16:43:03][351632918007555][1 ms][DEBUG] START check_scloud [2025-09-08 16:43:03][351632918007555][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:43:04][351632918007555][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 21693 15610 24952752 240068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:43:04][351632918007555][310 ms][DEBUG] targetPkg: running [2025-09-08 16:43:04][351632918007555][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 16:43:04][351632918007555][310 ms][DEBUG] START check_boot_completed [2025-09-08 16:43:04][351632918007555][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:43:04][351632918007555][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:43:04][351632918007555][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:43:04][351632918007555][419 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:43:04][351632918007555][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:43:04][351632918007555][419 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:43:04][351632918007555][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632918007555\",\"model\":\"SM-A136B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7230\"}'\'' -e'"" [2025-09-08 16:43:04][351632918007555][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:43:04][351632918007555][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632918007555\",\"model\":\"SM-A136B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7230\"}'\'' -e'"" [2025-09-08 16:43:08][351632918007555][4309 ms][DEBUG] proc_open done in 3889 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 16:43:08][351632918007555][4309 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-08 16:43:08][351632918007555][4309 ms][WARN] Detected error: Process with pid 21693 either refused to load frida-agent, or terminated during injectionProcess with pid 21693 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 16:43:08][351632918007555][4309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 16:43:08][351632918007555][4606 ms][DEBUG] SU: done in 297 ms; outsystem 15808 15610 12600224 189988 ep_poll 0 S system_server\n [2025-09-08 16:43:08][351632918007555][4606 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 16:43:08][351632918007555][4746 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 16:43:08][351632918007555][4746 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 16:43:08][351632918007555][4746 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 16:43:08][351632918007555][4857 ms][DEBUG] SU: done in 111 ms; out [2025-09-08 16:43:08][351632918007555][4857 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 16:43:08][351632918007555][5027 ms][DEBUG] SU: done in 170 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 16:43:10][351632918007555][7042 ms][DEBUG] START check_boot_completed [2025-09-08 16:43:10][351632918007555][7042 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:43:10][351632918007555][7089 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:43:10][351632918007555][7089 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:43:11][351632918007555][7136 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:43:11][351632918007555][7136 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:43:14][351632918007555][10151 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 16:43:14][351632918007555][10151 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632918007555\",\"model\":\"SM-A136B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7230\"}'\'' -e'"" [2025-09-08 16:43:18][351632918007555][14697 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe15e521-92b8-4aba-a399-69a7903815f4","id":"QR_fe15e521-92b8-4aba-a399-69a7903815f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:43:18][351632918007555][14853 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-08 16:43:18][351632918007555][14853 ms][DEBUG] END runCmdUntilRes#2 in 4702 ms [2025-09-08 16:43:18][351632918007555][14853 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:43:21][351632918007555][1 ms][INFO] === Request start === [2025-09-08 16:43:21][351632918007555][1 ms][DEBUG] START check_scloud [2025-09-08 16:43:21][351632918007555][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:43:21][351632918007555][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 23556 15610 23587524 123736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:43:21][351632918007555][297 ms][DEBUG] targetPkg: running [2025-09-08 16:43:21][351632918007555][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-08 16:43:21][351632918007555][297 ms][DEBUG] START check_boot_completed [2025-09-08 16:43:21][351632918007555][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:43:21][351632918007555][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 16:43:21][351632918007555][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:43:21][351632918007555][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:43:21][351632918007555][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 16:43:21][351632918007555][391 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:43:21][351632918007555][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632918007555\",\"model\":\"SM-A136B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7313\"}'\'' -e'"" [2025-09-08 16:43:21][351632918007555][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:43:21][351632918007555][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632918007555\",\"model\":\"SM-A136B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7313\"}'\'' -e'"" [2025-09-08 16:43:26][351632918007555][5311 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_221c040e-e0ef-4935-8fb8-3d382f36f389","id":"QR_221c040e-e0ef-4935-8fb8-3d382f36f389","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:43:26][351632918007555][5467 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-09-08 16:43:26][351632918007555][5468 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-08 16:43:26][351632918007555][5468 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:45:03][353628421985335][0 ms][INFO] === Request start === [2025-09-08 16:45:03][353628421985335][1 ms][DEBUG] START check_scloud [2025-09-08 16:45:03][353628421985335][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:45:04][353628421985335][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 23556 15610 23668412 137536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:45:04][353628421985335][299 ms][DEBUG] targetPkg: running [2025-09-08 16:45:04][353628421985335][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 16:45:04][353628421985335][299 ms][DEBUG] START check_boot_completed [2025-09-08 16:45:04][353628421985335][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:45:04][353628421985335][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:45:04][353628421985335][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:45:04][353628421985335][393 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 16:45:04][353628421985335][393 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 16:45:04][353628421985335][393 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:45:04][353628421985335][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628421985335\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9071\"}'\'' -e'"" [2025-09-08 16:45:04][353628421985335][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:45:04][353628421985335][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628421985335\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9071\"}'\'' -e'"" [2025-09-08 16:45:09][353628421985335][5735 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94f8fa58-5372-4244-9d8d-384b9964ee85","id":"QR_94f8fa58-5372-4244-9d8d-384b9964ee85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:45:09][353628421985335][5892 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-09-08 16:45:09][353628421985335][5892 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-09-08 16:45:09][353628421985335][5892 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:45:12][353628421985335][0 ms][INFO] === Request start === [2025-09-08 16:45:12][353628421985335][1 ms][DEBUG] START check_scloud [2025-09-08 16:45:12][353628421985335][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:45:12][353628421985335][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 23556 15610 23797560 149340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:45:12][353628421985335][280 ms][DEBUG] targetPkg: running [2025-09-08 16:45:12][353628421985335][280 ms][DEBUG] END check_scloud in 280 ms [2025-09-08 16:45:12][353628421985335][280 ms][DEBUG] START check_boot_completed [2025-09-08 16:45:12][353628421985335][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:45:12][353628421985335][325 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 16:45:12][353628421985335][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:45:12][353628421985335][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:45:12][353628421985335][372 ms][DEBUG] END check_boot_completed in 91 ms [2025-09-08 16:45:12][353628421985335][372 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:45:12][353628421985335][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628421985335\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9767\"}'\'' -e'"" [2025-09-08 16:45:12][353628421985335][372 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:45:12][353628421985335][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628421985335\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9767\"}'\'' -e'"" [2025-09-08 16:45:17][353628421985335][5433 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61a8f8f6-aa82-4068-aeda-c1961a404d9d","id":"QR_61a8f8f6-aa82-4068-aeda-c1961a404d9d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:45:17][353628421985335][5589 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-08 16:45:17][353628421985335][5589 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-08 16:45:17][353628421985335][5589 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:48:04][357651716208433][1 ms][INFO] === Request start === [2025-09-08 16:48:04][357651716208433][1 ms][DEBUG] START check_scloud [2025-09-08 16:48:04][357651716208433][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:48:05][357651716208433][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 23556 15610 23907256 160424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:48:05][357651716208433][307 ms][DEBUG] targetPkg: running [2025-09-08 16:48:05][357651716208433][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 16:48:05][357651716208433][307 ms][DEBUG] START check_boot_completed [2025-09-08 16:48:05][357651716208433][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:48:05][357651716208433][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:48:05][357651716208433][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:48:05][357651716208433][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:48:05][357651716208433][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 16:48:05][357651716208433][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:48:05][357651716208433][495 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7486\nsuccessfulTxPacketsPerSecond: 0.4947700481487631\nretriedTxPackets: 1782\nretriedTxPacketsPerSecond: 0.14278598704964304\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6632\nsuccessfulRxPacketsPerSecond: 0.4349991698489125\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:48:05][357651716208433][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:48:06][357651716208433][1791 ms][DEBUG] SU: done in 1296 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.711/198.711/198.711/0.000 ms\n [2025-09-08 16:48:06][357651716208433][1791 ms][DEBUG] check_internet: online [2025-09-08 16:48:06][357651716208433][1791 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:48:06][357651716208433][1792 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651716208433\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4387\"}'\'' -e'"" [2025-09-08 16:48:06][357651716208433][1792 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:48:06][357651716208433][1792 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651716208433\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4387\"}'\'' -e'"" [2025-09-08 16:48:11][357651716208433][6837 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_256a00b1-3cf4-40e5-ac69-0d23ce96ac6f","id":"QR_256a00b1-3cf4-40e5-ac69-0d23ce96ac6f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:48:11][357651716208433][6993 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-08 16:48:11][357651716208433][6993 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-08 16:48:11][357651716208433][6993 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:48:15][357651716208433][0 ms][INFO] === Request start === [2025-09-08 16:48:15][357651716208433][1 ms][DEBUG] START check_scloud [2025-09-08 16:48:15][357651716208433][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:48:15][357651716208433][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 23556 15610 24045632 171128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:48:15][357651716208433][261 ms][DEBUG] targetPkg: running [2025-09-08 16:48:15][357651716208433][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-08 16:48:15][357651716208433][261 ms][DEBUG] START check_boot_completed [2025-09-08 16:48:15][357651716208433][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:48:15][357651716208433][292 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:48:15][357651716208433][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:48:15][357651716208433][339 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:48:15][357651716208433][339 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 16:48:15][357651716208433][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:48:15][357651716208433][464 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7486\nsuccessfulTxPacketsPerSecond: 0.4947700481487631\nretriedTxPackets: 1782\nretriedTxPacketsPerSecond: 0.14278598704964304\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6632\nsuccessfulRxPacketsPerSecond: 0.4349991698489125\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:48:15][357651716208433][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:48:16][357651716208433][761 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.953/200.953/200.953/0.000 ms\n [2025-09-08 16:48:16][357651716208433][761 ms][DEBUG] check_internet: online [2025-09-08 16:48:16][357651716208433][761 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:48:16][357651716208433][761 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651716208433\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6037\"}'\'' -e'"" [2025-09-08 16:48:16][357651716208433][761 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:48:16][357651716208433][761 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651716208433\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6037\"}'\'' -e'"" [2025-09-08 16:48:20][357651716208433][5244 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93824771-7c6f-4771-bd69-1a7363425c54","id":"QR_93824771-7c6f-4771-bd69-1a7363425c54","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:48:20][357651716208433][5400 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-08 16:48:20][357651716208433][5400 ms][DEBUG] END runCmdUntilRes#1 in 4640 ms [2025-09-08 16:48:20][357651716208433][5400 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:51:04][353751680477024][0 ms][INFO] === Request start === [2025-09-08 16:51:04][353751680477024][1 ms][DEBUG] START check_scloud [2025-09-08 16:51:04][353751680477024][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:51:04][353751680477024][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 23556 15610 24175872 183576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:51:04][353751680477024][312 ms][DEBUG] targetPkg: running [2025-09-08 16:51:04][353751680477024][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 16:51:04][353751680477024][313 ms][DEBUG] START check_boot_completed [2025-09-08 16:51:04][353751680477024][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:51:04][353751680477024][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:51:04][353751680477024][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:51:04][353751680477024][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:51:04][353751680477024][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 16:51:04][353751680477024][391 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:51:04][353751680477024][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353751680477024\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2062\"}'\'' -e'"" [2025-09-08 16:51:04][353751680477024][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:51:04][353751680477024][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353751680477024\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2062\"}'\'' -e'"" [2025-09-08 16:51:10][353751680477024][5936 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4596d8a-3c31-4b53-951e-ccdd6a77de7a","id":"QR_a4596d8a-3c31-4b53-951e-ccdd6a77de7a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:51:10][353751680477024][6092 ms][DEBUG] proc_open done in 5701 ms; code=255; res.len=3343 [2025-09-08 16:51:10][353751680477024][6092 ms][DEBUG] END runCmdUntilRes#1 in 5701 ms [2025-09-08 16:51:10][353751680477024][6092 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:51:14][353751680477024][0 ms][INFO] === Request start === [2025-09-08 16:51:14][353751680477024][1 ms][DEBUG] START check_scloud [2025-09-08 16:51:14][353751680477024][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:51:14][353751680477024][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 23556 15610 24295816 194400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:51:14][353751680477024][256 ms][DEBUG] targetPkg: running [2025-09-08 16:51:14][353751680477024][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-08 16:51:14][353751680477024][256 ms][DEBUG] START check_boot_completed [2025-09-08 16:51:14][353751680477024][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:51:14][353751680477024][287 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:51:14][353751680477024][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:51:14][353751680477024][334 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:51:14][353751680477024][334 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 16:51:14][353751680477024][334 ms][DEBUG] rawBody.length=1150 [2025-09-08 16:51:14][353751680477024][334 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353751680477024\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8651\"}'\'' -e'"" [2025-09-08 16:51:14][353751680477024][334 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:51:14][353751680477024][334 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353751680477024\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8651\"}'\'' -e'"" [2025-09-08 16:51:18][353751680477024][4224 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d715d904-ff0d-4df0-aae0-147039f8a189","id":"QR_d715d904-ff0d-4df0-aae0-147039f8a189","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:51:18][353751680477024][4380 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-09-08 16:51:18][353751680477024][4380 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-09-08 16:51:18][353751680477024][4380 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:53:06][354484222235903][1 ms][INFO] === Request start === [2025-09-08 16:53:06][354484222235903][1 ms][DEBUG] START check_scloud [2025-09-08 16:53:06][354484222235903][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:53:06][354484222235903][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 23556 15610 24417736 206256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:53:06][354484222235903][292 ms][DEBUG] targetPkg: running [2025-09-08 16:53:06][354484222235903][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-08 16:53:06][354484222235903][292 ms][DEBUG] START check_boot_completed [2025-09-08 16:53:06][354484222235903][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:53:06][354484222235903][339 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 16:53:06][354484222235903][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:53:06][354484222235903][401 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 16:53:06][354484222235903][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 16:53:06][354484222235903][401 ms][DEBUG] rawBody.length=1170 [2025-09-08 16:53:06][354484222235903][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484222235903\",\"model\":\"SM-T500\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9XR406493J\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2401\"}'\'' -e'"" [2025-09-08 16:53:06][354484222235903][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:53:06][354484222235903][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484222235903\",\"model\":\"SM-T500\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9XR406493J\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2401\"}'\'' -e'"" [2025-09-08 16:53:12][354484222235903][6025 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_096f1c07-cad4-4355-b6f6-700a12172ba1","id":"QR_096f1c07-cad4-4355-b6f6-700a12172ba1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:53:12][354484222235903][6181 ms][DEBUG] proc_open done in 5780 ms; code=255; res.len=3343 [2025-09-08 16:53:12][354484222235903][6182 ms][DEBUG] END runCmdUntilRes#1 in 5780 ms [2025-09-08 16:53:12][354484222235903][6182 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 16:58:05][352693793462611][1 ms][INFO] === Request start === [2025-09-08 16:58:05][352693793462611][1 ms][DEBUG] START check_scloud [2025-09-08 16:58:05][352693793462611][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 16:58:05][352693793462611][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 23556 15610 24565448 216944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 16:58:05][352693793462611][318 ms][DEBUG] targetPkg: running [2025-09-08 16:58:05][352693793462611][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 16:58:05][352693793462611][318 ms][DEBUG] START check_boot_completed [2025-09-08 16:58:05][352693793462611][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 16:58:05][352693793462611][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 16:58:05][352693793462611][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 16:58:05][352693793462611][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 16:58:05][352693793462611][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 16:58:05][352693793462611][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 16:58:05][352693793462611][506 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7728\nsuccessfulTxPacketsPerSecond: 0.15967468943272906\nretriedTxPackets: 1844\nretriedTxPacketsPerSecond: 0.03193493788654581\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6842\nsuccessfulRxPacketsPerSecond: 0.1330622411939409\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 16:58:05][352693793462611][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 16:58:06][352693793462611][1834 ms][DEBUG] SU: done in 1327 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=188 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 188.343/188.343/188.343/0.000 ms\n [2025-09-08 16:58:06][352693793462611][1834 ms][DEBUG] check_internet: online [2025-09-08 16:58:06][352693793462611][1834 ms][DEBUG] rawBody.length=1160 [2025-09-08 16:58:06][352693793462611][1834 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352693793462611\",\"model\":\"SM-S721W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4169\"}'\'' -e'"" [2025-09-08 16:58:06][352693793462611][1834 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 16:58:06][352693793462611][1834 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352693793462611\",\"model\":\"SM-S721W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4169\"}'\'' -e'"" [2025-09-08 16:58:12][352693793462611][7192 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0814bcb-5edc-46fe-9fcf-f086b3f358dd","id":"QR_a0814bcb-5edc-46fe-9fcf-f086b3f358dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 16:58:12][352693793462611][7348 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-08 16:58:12][352693793462611][7348 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-08 16:58:12][352693793462611][7348 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:00:03][352469859619984][0 ms][INFO] === Request start === [2025-09-08 17:00:03][352469859619984][1 ms][DEBUG] START check_scloud [2025-09-08 17:00:03][352469859619984][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:00:04][352469859619984][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 23556 15610 24722348 229784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:00:04][352469859619984][312 ms][DEBUG] targetPkg: running [2025-09-08 17:00:04][352469859619984][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 17:00:04][352469859619984][312 ms][DEBUG] START check_boot_completed [2025-09-08 17:00:04][352469859619984][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:00:04][352469859619984][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:00:04][352469859619984][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:00:04][352469859619984][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:00:04][352469859619984][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:00:04][352469859619984][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:00:04][352469859619984][500 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7728\nsuccessfulTxPacketsPerSecond: 0.15967468943272906\nretriedTxPackets: 1844\nretriedTxPacketsPerSecond: 0.03193493788654581\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6842\nsuccessfulRxPacketsPerSecond: 0.1330622411939409\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:00:04][352469859619984][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:00:04][352469859619984][796 ms][DEBUG] SU: done in 296 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.568/205.568/205.568/0.000 ms\n [2025-09-08 17:00:04][352469859619984][796 ms][DEBUG] check_internet: online [2025-09-08 17:00:04][352469859619984][796 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:00:04][352469859619984][796 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859619984\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7467\"}'\'' -e'"" [2025-09-08 17:00:04][352469859619984][797 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:00:04][352469859619984][797 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859619984\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7467\"}'\'' -e'"" [2025-09-08 17:00:09][352469859619984][5952 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59ace5dc-be44-4cdf-8898-e12c82f9cf04","id":"QR_59ace5dc-be44-4cdf-8898-e12c82f9cf04","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:00:09][352469859619984][6108 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 17:00:09][352469859619984][6108 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 17:00:09][352469859619984][6108 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:00:12][352469859619984][1 ms][INFO] === Request start === [2025-09-08 17:00:12][352469859619984][1 ms][DEBUG] START check_scloud [2025-09-08 17:00:12][352469859619984][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:00:12][352469859619984][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 23556 15610 24883384 238832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:00:12][352469859619984][309 ms][DEBUG] targetPkg: running [2025-09-08 17:00:12][352469859619984][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 17:00:12][352469859619984][309 ms][DEBUG] START check_boot_completed [2025-09-08 17:00:12][352469859619984][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:00:12][352469859619984][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:00:12][352469859619984][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:00:12][352469859619984][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 17:00:12][352469859619984][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 17:00:12][352469859619984][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:00:12][352469859619984][527 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7728\nsuccessfulTxPacketsPerSecond: 0.15967468943272906\nretriedTxPackets: 1844\nretriedTxPacketsPerSecond: 0.03193493788654581\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6842\nsuccessfulRxPacketsPerSecond: 0.1330622411939409\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:00:12][352469859619984][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:00:13][352469859619984][809 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=157 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 157.058/157.058/157.058/0.000 ms\n [2025-09-08 17:00:13][352469859619984][809 ms][DEBUG] check_internet: online [2025-09-08 17:00:13][352469859619984][809 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:00:13][352469859619984][809 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859619984\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5150\"}'\'' -e'"" [2025-09-08 17:00:13][352469859619984][809 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:00:13][352469859619984][809 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859619984\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5150\"}'\'' -e'"" [2025-09-08 17:00:16][352469859619984][4636 ms][DEBUG] proc_open done in 3827 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 17:00:16][352469859619984][4636 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-09-08 17:00:16][352469859619984][4636 ms][WARN] Detected error: Process with pid 23556 either refused to load frida-agent, or terminated during injectionProcess with pid 23556 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 17:00:16][352469859619984][4636 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 17:00:17][352469859619984][4887 ms][DEBUG] SU: done in 251 ms; outsystem 15808 15610 12600224 188508 ep_poll 0 S system_server\n [2025-09-08 17:00:17][352469859619984][4887 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 17:00:17][352469859619984][5042 ms][DEBUG] SU: done in 155 ms; out [2025-09-08 17:00:17][352469859619984][5042 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 17:00:17][352469859619984][5042 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 17:00:17][352469859619984][5182 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 17:00:17][352469859619984][5182 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 17:00:17][352469859619984][5354 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 17:00:19][352469859619984][7369 ms][DEBUG] START check_boot_completed [2025-09-08 17:00:19][352469859619984][7369 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:00:19][352469859619984][7416 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:00:19][352469859619984][7416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:00:19][352469859619984][7479 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 17:00:19][352469859619984][7479 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 17:00:22][352469859619984][10493 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 17:00:22][352469859619984][10494 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859619984\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5150\"}'\'' -e'"" [2025-09-08 17:00:28][352469859619984][15758 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d16ec6f4-74de-4975-ada3-098a78d10b42","id":"QR_d16ec6f4-74de-4975-ada3-098a78d10b42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:00:28][352469859619984][15914 ms][DEBUG] proc_open done in 5421 ms; code=255; res.len=3343 [2025-09-08 17:00:28][352469859619984][15914 ms][DEBUG] END runCmdUntilRes#2 in 5421 ms [2025-09-08 17:00:28][352469859619984][15914 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:01:06][355857114097581][0 ms][INFO] === Request start === [2025-09-08 17:01:06][355857114097581][1 ms][DEBUG] START check_scloud [2025-09-08 17:01:06][355857114097581][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:01:06][355857114097581][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 25515 15610 23536664 128080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:01:06][355857114097581][311 ms][DEBUG] targetPkg: running [2025-09-08 17:01:06][355857114097581][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 17:01:06][355857114097581][311 ms][DEBUG] START check_boot_completed [2025-09-08 17:01:06][355857114097581][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:01:06][355857114097581][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:01:06][355857114097581][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:01:06][355857114097581][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 17:01:06][355857114097581][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 17:01:06][355857114097581][420 ms][DEBUG] rawBody.length=1170 [2025-09-08 17:01:06][355857114097581][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857114097581\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YW80JPRDJ\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5211\"}'\'' -e'"" [2025-09-08 17:01:06][355857114097581][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:01:06][355857114097581][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857114097581\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YW80JPRDJ\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5211\"}'\'' -e'"" [2025-09-08 17:01:11][355857114097581][5200 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fcea3a47-2977-4840-8224-51c9aad29b14","id":"QR_fcea3a47-2977-4840-8224-51c9aad29b14","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:01:11][355857114097581][5357 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-08 17:01:11][355857114097581][5357 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-08 17:01:11][355857114097581][5357 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:02:04][352429891932779][0 ms][INFO] === Request start === [2025-09-08 17:02:04][352429891932779][1 ms][DEBUG] START check_scloud [2025-09-08 17:02:04][352429891932779][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:02:04][352429891932779][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 25515 15610 23673084 138172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:02:04][352429891932779][252 ms][DEBUG] targetPkg: running [2025-09-08 17:02:04][352429891932779][252 ms][DEBUG] END check_scloud in 252 ms [2025-09-08 17:02:04][352429891932779][252 ms][DEBUG] START check_boot_completed [2025-09-08 17:02:04][352429891932779][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:02:04][352429891932779][298 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 17:02:04][352429891932779][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:02:04][352429891932779][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:02:04][352429891932779][345 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 17:02:04][352429891932779][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:02:04][352429891932779][470 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7975\nsuccessfulTxPacketsPerSecond: 0.7973400477758409\nretriedTxPackets: 1897\nretriedTxPacketsPerSecond: 0.17108916004906707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7058\nsuccessfulRxPacketsPerSecond: 0.6972690296339338\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:02:04][352429891932779][470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:02:05][352429891932779][845 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=270 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 270.078/270.078/270.078/0.000 ms\n [2025-09-08 17:02:05][352429891932779][845 ms][DEBUG] check_internet: online [2025-09-08 17:02:05][352429891932779][845 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:02:05][352429891932779][845 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429891932779\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5307\"}'\'' -e'"" [2025-09-08 17:02:05][352429891932779][845 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:02:05][352429891932779][845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429891932779\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5307\"}'\'' -e'"" [2025-09-08 17:02:10][352429891932779][6312 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ca92c09-7235-4101-a2f5-818231e177b8","id":"QR_4ca92c09-7235-4101-a2f5-818231e177b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:02:10][352429891932779][6468 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-09-08 17:02:10][352429891932779][6468 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-09-08 17:02:10][352429891932779][6468 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:02:14][352429891932779][1 ms][INFO] === Request start === [2025-09-08 17:02:14][352429891932779][1 ms][DEBUG] START check_scloud [2025-09-08 17:02:14][352429891932779][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:02:14][352429891932779][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 25515 15610 23844292 149996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:02:14][352429891932779][270 ms][DEBUG] targetPkg: running [2025-09-08 17:02:14][352429891932779][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-08 17:02:14][352429891932779][270 ms][DEBUG] START check_boot_completed [2025-09-08 17:02:14][352429891932779][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:02:14][352429891932779][316 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:02:14][352429891932779][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:02:14][352429891932779][379 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 17:02:14][352429891932779][379 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 17:02:14][352429891932779][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:02:14][352429891932779][504 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7975\nsuccessfulTxPacketsPerSecond: 0.7973400477758409\nretriedTxPackets: 1897\nretriedTxPacketsPerSecond: 0.17108916004906707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7058\nsuccessfulRxPacketsPerSecond: 0.6972690296339338\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:02:14][352429891932779][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:02:15][352429891932779][816 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.950/194.950/194.950/0.000 ms\n [2025-09-08 17:02:15][352429891932779][817 ms][DEBUG] check_internet: online [2025-09-08 17:02:15][352429891932779][817 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:02:15][352429891932779][817 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429891932779\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4065\"}'\'' -e'"" [2025-09-08 17:02:15][352429891932779][817 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:02:15][352429891932779][817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429891932779\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4065\"}'\'' -e'"" [2025-09-08 17:02:19][352429891932779][4878 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd9c4583-5442-4284-8f80-506ecf1eae16","id":"QR_fd9c4583-5442-4284-8f80-506ecf1eae16","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:02:19][352429891932779][5034 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-09-08 17:02:19][352429891932779][5034 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-09-08 17:02:19][352429891932779][5034 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:04:05][354401160246221][0 ms][INFO] === Request start === [2025-09-08 17:04:05][354401160246221][1 ms][DEBUG] START check_scloud [2025-09-08 17:04:05][354401160246221][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:04:05][354401160246221][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 25515 15610 23967224 161136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:04:05][354401160246221][268 ms][DEBUG] targetPkg: running [2025-09-08 17:04:05][354401160246221][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-08 17:04:05][354401160246221][268 ms][DEBUG] START check_boot_completed [2025-09-08 17:04:05][354401160246221][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:04:05][354401160246221][299 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:04:05][354401160246221][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:04:05][354401160246221][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:04:05][354401160246221][346 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:04:05][354401160246221][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:04:05][354401160246221][486 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7975\nsuccessfulTxPacketsPerSecond: 0.7973400477758409\nretriedTxPackets: 1897\nretriedTxPacketsPerSecond: 0.17108916004906707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7058\nsuccessfulRxPacketsPerSecond: 0.6972690296339338\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:04:05][354401160246221][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:04:06][354401160246221][1830 ms][DEBUG] SU: done in 1343 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.732/198.732/198.732/0.000 ms\n [2025-09-08 17:04:06][354401160246221][1830 ms][DEBUG] check_internet: online [2025-09-08 17:04:06][354401160246221][1830 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:04:06][354401160246221][1830 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401160246221\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1619\"}'\'' -e'"" [2025-09-08 17:04:06][354401160246221][1830 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:04:06][354401160246221][1831 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401160246221\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1619\"}'\'' -e'"" [2025-09-08 17:04:10][354401160246221][5876 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-08 17:04:11][354401160246221][6032 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=101 [2025-09-08 17:04:11][354401160246221][6032 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-09-08 17:04:11][354401160246221][6032 ms][INFO] SUCCESS response from frida (len=101) [2025-09-08 17:04:11][][0 ms][INFO] === Request start === [2025-09-08 17:04:11][][1 ms][DEBUG] START check_scloud [2025-09-08 17:04:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:04:11][][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 25515 15610 24106432 172744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:04:11][][269 ms][DEBUG] targetPkg: running [2025-09-08 17:04:11][][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-08 17:04:11][][269 ms][DEBUG] START check_boot_completed [2025-09-08 17:04:11][][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:04:11][][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:04:11][][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:04:11][][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:04:11][][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 17:04:11][][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:04:11][][471 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7975\nsuccessfulTxPacketsPerSecond: 0.7973400477758409\nretriedTxPackets: 1897\nretriedTxPacketsPerSecond: 0.17108916004906707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7058\nsuccessfulRxPacketsPerSecond: 0.6972690296339338\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:04:11][][471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:04:12][][737 ms][DEBUG] SU: done in 266 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.177/164.177/164.177/0.000 ms\n [2025-09-08 17:04:12][][737 ms][DEBUG] check_internet: online [2025-09-08 17:04:12][][737 ms][DEBUG] rawBody.length=1141 [2025-09-08 17:04:12][][737 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X909RD9F\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1778\"}'\'' -e'"" [2025-09-08 17:04:12][][737 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:04:12][][738 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X909RD9F\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1778\"}'\'' -e'"" [2025-09-08 17:04:15][][4486 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-08 17:04:16][][4642 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=101 [2025-09-08 17:04:16][][4642 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-08 17:04:16][][4642 ms][INFO] SUCCESS response from frida (len=101) [2025-09-08 17:04:16][354401160246221][1 ms][INFO] === Request start === [2025-09-08 17:04:16][354401160246221][1 ms][DEBUG] START check_scloud [2025-09-08 17:04:16][354401160246221][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:04:16][354401160246221][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 25515 15610 24278848 183792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:04:16][354401160246221][308 ms][DEBUG] targetPkg: running [2025-09-08 17:04:16][354401160246221][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 17:04:16][354401160246221][308 ms][DEBUG] START check_boot_completed [2025-09-08 17:04:16][354401160246221][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:04:16][354401160246221][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:04:16][354401160246221][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:04:16][354401160246221][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:04:16][354401160246221][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 17:04:16][354401160246221][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:04:17][354401160246221][527 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7975\nsuccessfulTxPacketsPerSecond: 0.7973400477758409\nretriedTxPackets: 1897\nretriedTxPacketsPerSecond: 0.17108916004906707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7058\nsuccessfulRxPacketsPerSecond: 0.6972690296339338\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:04:17][354401160246221][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:04:17][354401160246221][808 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.794/164.794/164.794/0.000 ms\n [2025-09-08 17:04:17][354401160246221][808 ms][DEBUG] check_internet: online [2025-09-08 17:04:17][354401160246221][809 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:04:17][354401160246221][809 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401160246221\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5549\"}'\'' -e'"" [2025-09-08 17:04:17][354401160246221][809 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:04:17][354401160246221][809 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401160246221\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5549\"}'\'' -e'"" [2025-09-08 17:04:20][354401160246221][4416 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68f7e19a-5098-4594-9b60-72ba8ba540d5","id":"QR_68f7e19a-5098-4594-9b60-72ba8ba540d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:04:21][354401160246221][4573 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-09-08 17:04:21][354401160246221][4573 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-08 17:04:21][354401160246221][4573 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:04:24][351583483010898][0 ms][INFO] === Request start === [2025-09-08 17:04:24][351583483010898][1 ms][DEBUG] START check_scloud [2025-09-08 17:04:24][351583483010898][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:04:24][351583483010898][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 25515 15610 24417224 195436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:04:24][351583483010898][306 ms][DEBUG] targetPkg: running [2025-09-08 17:04:24][351583483010898][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 17:04:24][351583483010898][306 ms][DEBUG] START check_boot_completed [2025-09-08 17:04:24][351583483010898][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:04:24][351583483010898][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:04:24][351583483010898][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:04:24][351583483010898][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:04:24][351583483010898][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 17:04:24][351583483010898][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:04:24][351583483010898][508 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7975\nsuccessfulTxPacketsPerSecond: 0.7973400477758409\nretriedTxPackets: 1897\nretriedTxPacketsPerSecond: 0.17108916004906707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7058\nsuccessfulRxPacketsPerSecond: 0.6972690296339338\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:04:24][351583483010898][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:04:25][351583483010898][883 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=281 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 281.132/281.132/281.132/0.000 ms\n [2025-09-08 17:04:25][351583483010898][884 ms][DEBUG] check_internet: online [2025-09-08 17:04:25][351583483010898][884 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:04:25][351583483010898][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351583483010898\",\"model\":\"SM-A235M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3340\"}'\'' -e'"" [2025-09-08 17:04:25][351583483010898][884 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:04:25][351583483010898][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351583483010898\",\"model\":\"SM-A235M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3340\"}'\'' -e'"" [2025-09-08 17:04:29][351583483010898][5523 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c2dd1cc-7644-4fda-b134-b757f0e778de","id":"QR_8c2dd1cc-7644-4fda-b134-b757f0e778de","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:04:30][351583483010898][5679 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 17:04:30][351583483010898][5679 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 17:04:30][351583483010898][5679 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:04:33][351583483010898][0 ms][INFO] === Request start === [2025-09-08 17:04:33][351583483010898][1 ms][DEBUG] START check_scloud [2025-09-08 17:04:33][351583483010898][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:04:33][351583483010898][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 25515 15610 24569352 206304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:04:33][351583483010898][315 ms][DEBUG] targetPkg: running [2025-09-08 17:04:33][351583483010898][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 17:04:33][351583483010898][315 ms][DEBUG] START check_boot_completed [2025-09-08 17:04:33][351583483010898][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:04:33][351583483010898][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:04:33][351583483010898][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:04:33][351583483010898][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:04:33][351583483010898][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 17:04:33][351583483010898][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:04:33][351583483010898][520 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7975\nsuccessfulTxPacketsPerSecond: 0.7973400477758409\nretriedTxPackets: 1897\nretriedTxPacketsPerSecond: 0.17108916004906707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7058\nsuccessfulRxPacketsPerSecond: 0.6972690296339338\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:04:33][351583483010898][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:04:34][351583483010898][893 ms][DEBUG] SU: done in 372 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.249/257.249/257.249/0.000 ms\n [2025-09-08 17:04:34][351583483010898][893 ms][DEBUG] check_internet: online [2025-09-08 17:04:34][351583483010898][893 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:04:34][351583483010898][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351583483010898\",\"model\":\"SM-A235M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1088\"}'\'' -e'"" [2025-09-08 17:04:34][351583483010898][893 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:04:34][351583483010898][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351583483010898\",\"model\":\"SM-A235M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1088\"}'\'' -e'"" [2025-09-08 17:04:37][351583483010898][4470 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_444d1ccd-f885-4603-93ca-57cb7a3b252c","id":"QR_444d1ccd-f885-4603-93ca-57cb7a3b252c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:04:38][351583483010898][4626 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-08 17:04:38][351583483010898][4626 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-08 17:04:38][351583483010898][4626 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:05:03][354230214000080][0 ms][INFO] === Request start === [2025-09-08 17:05:03][354230214000080][1 ms][DEBUG] START check_scloud [2025-09-08 17:05:03][354230214000080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:05:03][354230214000080][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 25515 15610 24646308 218748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:05:03][354230214000080][258 ms][DEBUG] targetPkg: running [2025-09-08 17:05:03][354230214000080][258 ms][DEBUG] END check_scloud in 258 ms [2025-09-08 17:05:03][354230214000080][258 ms][DEBUG] START check_boot_completed [2025-09-08 17:05:03][354230214000080][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:05:03][354230214000080][305 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:05:03][354230214000080][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:05:03][354230214000080][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:05:03][354230214000080][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 17:05:03][354230214000080][352 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:05:03][354230214000080][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354230214000080\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6459\"}'\'' -e'"" [2025-09-08 17:05:03][354230214000080][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:05:03][354230214000080][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354230214000080\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6459\"}'\'' -e'"" [2025-09-08 17:05:07][354230214000080][3742 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_121d955b-5ddd-4c28-a797-d80d842c59ef","id":"QR_121d955b-5ddd-4c28-a797-d80d842c59ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:05:07][354230214000080][3898 ms][DEBUG] proc_open done in 3546 ms; code=255; res.len=3343 [2025-09-08 17:05:07][354230214000080][3898 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-08 17:05:07][354230214000080][3898 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:05:09][354230214000080][0 ms][INFO] === Request start === [2025-09-08 17:05:09][354230214000080][1 ms][DEBUG] START check_scloud [2025-09-08 17:05:09][354230214000080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:05:10][354230214000080][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 25515 15610 24825772 229720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:05:10][354230214000080][302 ms][DEBUG] targetPkg: running [2025-09-08 17:05:10][354230214000080][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 17:05:10][354230214000080][302 ms][DEBUG] START check_boot_completed [2025-09-08 17:05:10][354230214000080][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:05:10][354230214000080][349 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:05:10][354230214000080][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:05:10][354230214000080][411 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 17:05:10][354230214000080][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 17:05:10][354230214000080][411 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:05:10][354230214000080][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354230214000080\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4975\"}'\'' -e'"" [2025-09-08 17:05:10][354230214000080][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:05:10][354230214000080][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354230214000080\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4975\"}'\'' -e'"" [2025-09-08 17:05:15][354230214000080][6128 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_775118de-9ea4-4d85-b8e9-b0fbaf9fbead","id":"QR_775118de-9ea4-4d85-b8e9-b0fbaf9fbead","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:05:16][354230214000080][6284 ms][DEBUG] proc_open done in 5873 ms; code=255; res.len=3343 [2025-09-08 17:05:16][354230214000080][6285 ms][DEBUG] END runCmdUntilRes#1 in 5873 ms [2025-09-08 17:05:16][354230214000080][6285 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:06:04][353684145881110][0 ms][INFO] === Request start === [2025-09-08 17:06:04][353684145881110][1 ms][DEBUG] START check_scloud [2025-09-08 17:06:04][353684145881110][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:06:04][353684145881110][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 25515 15610 24951916 241868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:06:04][353684145881110][303 ms][DEBUG] targetPkg: running [2025-09-08 17:06:04][353684145881110][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 17:06:04][353684145881110][303 ms][DEBUG] START check_boot_completed [2025-09-08 17:06:04][353684145881110][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:06:04][353684145881110][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:06:04][353684145881110][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:06:05][353684145881110][412 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 17:06:05][353684145881110][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 17:06:05][353684145881110][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:06:05][353684145881110][537 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7975\nsuccessfulTxPacketsPerSecond: 0.7973400477758409\nretriedTxPackets: 1897\nretriedTxPacketsPerSecond: 0.17108916004906707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7058\nsuccessfulRxPacketsPerSecond: 0.6972690296339338\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:06:05][353684145881110][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:06:05][353684145881110][896 ms][DEBUG] SU: done in 360 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.212/253.212/253.212/0.000 ms\n [2025-09-08 17:06:05][353684145881110][897 ms][DEBUG] check_internet: online [2025-09-08 17:06:05][353684145881110][897 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:06:05][353684145881110][897 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145881110\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8302\"}'\'' -e'"" [2025-09-08 17:06:05][353684145881110][897 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:06:05][353684145881110][897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145881110\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8302\"}'\'' -e'"" [2025-09-08 17:06:09][353684145881110][4630 ms][DEBUG] proc_open done in 3733 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 17:06:09][353684145881110][4630 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-08 17:06:09][353684145881110][4630 ms][WARN] Detected error: Process with pid 25515 either refused to load frida-agent, or terminated during injectionProcess with pid 25515 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 17:06:09][353684145881110][4630 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 17:06:09][353684145881110][4927 ms][DEBUG] SU: done in 297 ms; outsystem 15808 15610 12600224 172384 ep_poll 0 S system_server\n [2025-09-08 17:06:09][353684145881110][4927 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 17:06:09][353684145881110][5067 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 17:06:09][353684145881110][5067 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 17:06:09][353684145881110][5067 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 17:06:09][353684145881110][5223 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 17:06:09][353684145881110][5223 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 17:06:09][353684145881110][5364 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 17:06:11][353684145881110][7379 ms][DEBUG] START check_boot_completed [2025-09-08 17:06:11][353684145881110][7379 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:06:12][353684145881110][7426 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:06:12][353684145881110][7426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:06:12][353684145881110][7489 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 17:06:12][353684145881110][7489 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 17:06:15][353684145881110][10503 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 17:06:15][353684145881110][10503 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145881110\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8302\"}'\'' -e'"" [2025-09-08 17:06:20][353684145881110][15408 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bce146df-3ceb-4d38-b7d8-8eb0ed228742","id":"QR_bce146df-3ceb-4d38-b7d8-8eb0ed228742","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:06:20][353684145881110][15565 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-08 17:06:20][353684145881110][15565 ms][DEBUG] END runCmdUntilRes#2 in 5061 ms [2025-09-08 17:06:20][353684145881110][15565 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:06:22][353684145881110][1 ms][INFO] === Request start === [2025-09-08 17:06:22][353684145881110][1 ms][DEBUG] START check_scloud [2025-09-08 17:06:22][353684145881110][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:06:22][353684145881110][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 27116 15610 23610112 123440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:06:22][353684145881110][275 ms][DEBUG] targetPkg: running [2025-09-08 17:06:22][353684145881110][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-08 17:06:22][353684145881110][275 ms][DEBUG] START check_boot_completed [2025-09-08 17:06:22][353684145881110][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:06:22][353684145881110][322 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:06:22][353684145881110][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:06:22][353684145881110][369 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:06:22][353684145881110][369 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 17:06:22][353684145881110][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:06:22][353684145881110][464 ms][DEBUG] SU: done in 96 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7975\nsuccessfulTxPacketsPerSecond: 0.7973400477758409\nretriedTxPackets: 1897\nretriedTxPacketsPerSecond: 0.17108916004906707\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7058\nsuccessfulRxPacketsPerSecond: 0.6972690296339338\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:06:22][353684145881110][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:06:23][353684145881110][791 ms][DEBUG] SU: done in 327 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.359/198.359/198.359/0.000 ms\n [2025-09-08 17:06:23][353684145881110][791 ms][DEBUG] check_internet: online [2025-09-08 17:06:23][353684145881110][791 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:06:23][353684145881110][791 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145881110\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9101\"}'\'' -e'"" [2025-09-08 17:06:23][353684145881110][791 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:06:23][353684145881110][792 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145881110\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9101\"}'\'' -e'"" [2025-09-08 17:06:28][353684145881110][5836 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e3d3852-5cac-40b1-b358-57457748708e","id":"QR_0e3d3852-5cac-40b1-b358-57457748708e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:06:28][353684145881110][5992 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-08 17:06:28][353684145881110][5992 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-08 17:06:28][353684145881110][5992 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:12:03][351424286831422][1 ms][INFO] === Request start === [2025-09-08 17:12:03][351424286831422][1 ms][DEBUG] START check_scloud [2025-09-08 17:12:03][351424286831422][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:12:04][351424286831422][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 27116 15610 23679664 137460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:12:04][351424286831422][272 ms][DEBUG] targetPkg: running [2025-09-08 17:12:04][351424286831422][272 ms][DEBUG] END check_scloud in 270 ms [2025-09-08 17:12:04][351424286831422][272 ms][DEBUG] START check_boot_completed [2025-09-08 17:12:04][351424286831422][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:12:04][351424286831422][303 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:12:04][351424286831422][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:12:04][351424286831422][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:12:04][351424286831422][350 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:12:04][351424286831422][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:12:04][351424286831422][459 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8366\nsuccessfulTxPacketsPerSecond: 0.14953146806672427\nretriedTxPackets: 1999\nretriedTxPacketsPerSecond: 0.033229215125938724\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7394\nsuccessfulRxPacketsPerSecond: 0.1362397820163488\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:12:04][351424286831422][459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:12:05][351424286831422][1709 ms][DEBUG] SU: done in 1250 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.052/199.052/199.052/0.000 ms\n [2025-09-08 17:12:05][351424286831422][1709 ms][DEBUG] check_internet: online [2025-09-08 17:12:05][351424286831422][1709 ms][DEBUG] rawBody.length=1149 [2025-09-08 17:12:05][351424286831422][1709 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351424286831422\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9142\"}'\'' -e'"" [2025-09-08 17:12:05][351424286831422][1709 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:12:05][351424286831422][1709 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351424286831422\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9142\"}'\'' -e'"" [2025-09-08 17:12:09][351424286831422][5348 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1313ac8-0bf5-4f74-8aee-3761ae074533","id":"QR_d1313ac8-0bf5-4f74-8aee-3761ae074533","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:12:09][351424286831422][5505 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-09-08 17:12:09][351424286831422][5505 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-09-08 17:12:09][351424286831422][5505 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:12:11][351424286831422][0 ms][INFO] === Request start === [2025-09-08 17:12:11][351424286831422][1 ms][DEBUG] START check_scloud [2025-09-08 17:12:11][351424286831422][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:12:11][351424286831422][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 27116 15610 23818040 149224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:12:11][351424286831422][315 ms][DEBUG] targetPkg: running [2025-09-08 17:12:11][351424286831422][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 17:12:11][351424286831422][316 ms][DEBUG] START check_boot_completed [2025-09-08 17:12:11][351424286831422][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:12:12][351424286831422][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:12:12][351424286831422][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:12:12][351424286831422][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:12:12][351424286831422][410 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 17:12:12][351424286831422][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:12:12][351424286831422][534 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8366\nsuccessfulTxPacketsPerSecond: 0.14953146806672427\nretriedTxPackets: 1999\nretriedTxPacketsPerSecond: 0.033229215125938724\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7394\nsuccessfulRxPacketsPerSecond: 0.1362397820163488\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:12:12][351424286831422][534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:12:12][351424286831422][831 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.549/164.549/164.549/0.000 ms\n [2025-09-08 17:12:12][351424286831422][831 ms][DEBUG] check_internet: online [2025-09-08 17:12:12][351424286831422][831 ms][DEBUG] rawBody.length=1159 [2025-09-08 17:12:12][351424286831422][831 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351424286831422\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6684\"}'\'' -e'"" [2025-09-08 17:12:12][351424286831422][831 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:12:12][351424286831422][831 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351424286831422\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6684\"}'\'' -e'"" [2025-09-08 17:12:17][351424286831422][5595 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dcdf6074-24d8-45a2-b0e6-e52d0099ef4c","id":"QR_dcdf6074-24d8-45a2-b0e6-e52d0099ef4c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:12:17][351424286831422][5751 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-08 17:12:17][351424286831422][5751 ms][DEBUG] END runCmdUntilRes#1 in 4920 ms [2025-09-08 17:12:17][351424286831422][5751 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:13:04][353243884267690][0 ms][INFO] === Request start === [2025-09-08 17:13:04][353243884267690][0 ms][DEBUG] START check_scloud [2025-09-08 17:13:04][353243884267690][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:13:04][353243884267690][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 27116 15610 23958520 160304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:13:04][353243884267690][305 ms][DEBUG] targetPkg: running [2025-09-08 17:13:04][353243884267690][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 17:13:04][353243884267690][305 ms][DEBUG] START check_boot_completed [2025-09-08 17:13:04][353243884267690][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:13:04][353243884267690][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:13:04][353243884267690][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:13:04][353243884267690][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:13:04][353243884267690][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:13:04][353243884267690][383 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:13:04][353243884267690][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243884267690\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5282\"}'\'' -e'"" [2025-09-08 17:13:04][353243884267690][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:13:04][353243884267690][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243884267690\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5282\"}'\'' -e'"" [2025-09-08 17:13:07][353243884267690][3694 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63c96da0-205b-4e0e-aa10-c68cbd7899da","id":"QR_63c96da0-205b-4e0e-aa10-c68cbd7899da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:13:07][353243884267690][3851 ms][DEBUG] proc_open done in 3468 ms; code=255; res.len=3343 [2025-09-08 17:13:07][353243884267690][3851 ms][DEBUG] END runCmdUntilRes#1 in 3468 ms [2025-09-08 17:13:07][353243884267690][3851 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:13:10][353243884267690][0 ms][INFO] === Request start === [2025-09-08 17:13:10][353243884267690][0 ms][DEBUG] START check_scloud [2025-09-08 17:13:10][353243884267690][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:13:10][353243884267690][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 27116 15610 24117504 171132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:13:10][353243884267690][256 ms][DEBUG] targetPkg: running [2025-09-08 17:13:10][353243884267690][256 ms][DEBUG] END check_scloud in 256 ms [2025-09-08 17:13:10][353243884267690][256 ms][DEBUG] START check_boot_completed [2025-09-08 17:13:10][353243884267690][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:13:10][353243884267690][302 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:13:10][353243884267690][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:13:10][353243884267690][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:13:10][353243884267690][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 17:13:10][353243884267690][349 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:13:10][353243884267690][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243884267690\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3347\"}'\'' -e'"" [2025-09-08 17:13:10][353243884267690][349 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:13:10][353243884267690][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243884267690\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3347\"}'\'' -e'"" [2025-09-08 17:13:15][353243884267690][5114 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_53f191ba-a93a-4539-8687-8a2cdfd76f87","id":"QR_53f191ba-a93a-4539-8687-8a2cdfd76f87","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:13:15][353243884267690][5270 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-09-08 17:13:15][353243884267690][5270 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-08 17:13:15][353243884267690][5270 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:22:03][357081196693633][1 ms][INFO] === Request start === [2025-09-08 17:22:03][357081196693633][1 ms][DEBUG] START check_scloud [2025-09-08 17:22:03][357081196693633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:22:04][357081196693633][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 27116 15610 24253712 183592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:22:04][357081196693633][303 ms][DEBUG] targetPkg: running [2025-09-08 17:22:04][357081196693633][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 17:22:04][357081196693633][303 ms][DEBUG] START check_boot_completed [2025-09-08 17:22:04][357081196693633][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:22:04][357081196693633][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:22:04][357081196693633][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:22:04][357081196693633][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:22:04][357081196693633][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:22:04][357081196693633][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:22:04][357081196693633][506 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8548\nsuccessfulTxPacketsPerSecond: 0.6044061875253219\nretriedTxPackets: 2035\nretriedTxPacketsPerSecond: 0.11955287225775599\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7554\nsuccessfulRxPacketsPerSecond: 0.5313460989233599\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:22:04][357081196693633][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:22:05][357081196693633][2053 ms][DEBUG] SU: done in 1546 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.715/201.715/201.715/0.000 ms\n [2025-09-08 17:22:05][357081196693633][2053 ms][DEBUG] check_internet: online [2025-09-08 17:22:05][357081196693633][2053 ms][DEBUG] rawBody.length=1149 [2025-09-08 17:22:05][357081196693633][2053 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357081196693633\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3336\"}'\'' -e'"" [2025-09-08 17:22:05][357081196693633][2053 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:22:05][357081196693633][2053 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357081196693633\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3336\"}'\'' -e'"" [2025-09-08 17:22:09][357081196693633][5942 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c876d21-6986-4247-8a3e-3e446b87a7fa","id":"QR_7c876d21-6986-4247-8a3e-3e446b87a7fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:22:09][357081196693633][6098 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-09-08 17:22:09][357081196693633][6099 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-09-08 17:22:09][357081196693633][6099 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:22:12][357081196693633][0 ms][INFO] === Request start === [2025-09-08 17:22:12][357081196693633][0 ms][DEBUG] START check_scloud [2025-09-08 17:22:12][357081196693633][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:22:12][357081196693633][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 27116 15610 24428132 194688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:22:12][357081196693633][308 ms][DEBUG] targetPkg: running [2025-09-08 17:22:12][357081196693633][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 17:22:12][357081196693633][308 ms][DEBUG] START check_boot_completed [2025-09-08 17:22:12][357081196693633][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:22:12][357081196693633][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:22:12][357081196693633][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:22:12][357081196693633][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 17:22:12][357081196693633][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 17:22:12][357081196693633][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:22:12][357081196693633][527 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8615\nsuccessfulTxPacketsPerSecond: 0.22251300206571772\nretriedTxPackets: 2053\nretriedTxPacketsPerSecond: 0.05977961249526745\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7614\nsuccessfulRxPacketsPerSecond: 0.19926537498422484\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:22:12][357081196693633][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:22:12][357081196693633][808 ms][DEBUG] SU: done in 280 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.661/163.661/163.661/0.000 ms\n [2025-09-08 17:22:12][357081196693633][808 ms][DEBUG] check_internet: online [2025-09-08 17:22:12][357081196693633][808 ms][DEBUG] rawBody.length=1159 [2025-09-08 17:22:12][357081196693633][808 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357081196693633\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3207\"}'\'' -e'"" [2025-09-08 17:22:12][357081196693633][808 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:22:12][357081196693633][808 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357081196693633\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3207\"}'\'' -e'"" [2025-09-08 17:22:18][357081196693633][6103 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_56c96db5-50e4-462f-b3ee-c513d951d1c1","id":"QR_56c96db5-50e4-462f-b3ee-c513d951d1c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:22:18][357081196693633][6260 ms][DEBUG] proc_open done in 5451 ms; code=255; res.len=3343 [2025-09-08 17:22:18][357081196693633][6260 ms][DEBUG] END runCmdUntilRes#1 in 5452 ms [2025-09-08 17:22:18][357081196693633][6260 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:32:03][353684145413542][1 ms][INFO] === Request start === [2025-09-08 17:32:03][353684145413542][1 ms][DEBUG] START check_scloud [2025-09-08 17:32:03][353684145413542][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:32:04][353684145413542][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 27116 15610 24505880 205676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:32:04][353684145413542][268 ms][DEBUG] targetPkg: running [2025-09-08 17:32:04][353684145413542][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-08 17:32:04][353684145413542][268 ms][DEBUG] START check_boot_completed [2025-09-08 17:32:04][353684145413542][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:32:04][353684145413542][299 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:32:04][353684145413542][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:32:04][353684145413542][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:32:04][353684145413542][346 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:32:04][353684145413542][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:32:04][353684145413542][455 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8741\nsuccessfulTxPacketsPerSecond: 0.14229878951163055\nretriedTxPackets: 2080\nretriedTxPacketsPerSecond: 0.009486585967442049\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7729\nsuccessfulRxPacketsPerSecond: 0.14229878951163055\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:32:04][353684145413542][455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:32:05][353684145413542][1721 ms][DEBUG] SU: done in 1265 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.265/198.265/198.265/0.000 ms\n [2025-09-08 17:32:05][353684145413542][1721 ms][DEBUG] check_internet: online [2025-09-08 17:32:05][353684145413542][1721 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:32:05][353684145413542][1721 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145413542\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2759\"}'\'' -e'"" [2025-09-08 17:32:05][353684145413542][1721 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:32:05][353684145413542][1721 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145413542\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2759\"}'\'' -e'"" [2025-09-08 17:32:09][353684145413542][5907 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8ca0b20-2de3-4954-8ede-49e8fa274d3f","id":"QR_b8ca0b20-2de3-4954-8ede-49e8fa274d3f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:32:09][353684145413542][6063 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-09-08 17:32:09][353684145413542][6063 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-09-08 17:32:09][353684145413542][6063 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:32:12][353684145413542][1 ms][INFO] === Request start === [2025-09-08 17:32:12][353684145413542][1 ms][DEBUG] START check_scloud [2025-09-08 17:32:12][353684145413542][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:32:12][353684145413542][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 27116 15610 24682348 217192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:32:12][353684145413542][261 ms][DEBUG] targetPkg: running [2025-09-08 17:32:12][353684145413542][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-08 17:32:12][353684145413542][262 ms][DEBUG] START check_boot_completed [2025-09-08 17:32:12][353684145413542][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:32:12][353684145413542][308 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:32:12][353684145413542][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:32:12][353684145413542][371 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 17:32:12][353684145413542][371 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 17:32:12][353684145413542][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:32:12][353684145413542][511 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8741\nsuccessfulTxPacketsPerSecond: 0.14229878951163055\nretriedTxPackets: 2080\nretriedTxPacketsPerSecond: 0.009486585967442049\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7729\nsuccessfulRxPacketsPerSecond: 0.14229878951163055\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:32:12][353684145413542][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:32:13][353684145413542][823 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.723/194.723/194.723/0.000 ms\n [2025-09-08 17:32:13][353684145413542][824 ms][DEBUG] check_internet: online [2025-09-08 17:32:13][353684145413542][824 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:32:13][353684145413542][824 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145413542\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8613\"}'\'' -e'"" [2025-09-08 17:32:13][353684145413542][824 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:32:13][353684145413542][824 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145413542\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8613\"}'\'' -e'"" [2025-09-08 17:32:17][353684145413542][5682 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f20c8f4-2d5c-4492-9e26-b8360b0272ba","id":"QR_7f20c8f4-2d5c-4492-9e26-b8360b0272ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:32:18][353684145413542][5838 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-08 17:32:18][353684145413542][5838 ms][DEBUG] END runCmdUntilRes#1 in 5015 ms [2025-09-08 17:32:18][353684145413542][5838 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:33:03][357962502797673][0 ms][INFO] === Request start === [2025-09-08 17:33:03][357962502797673][1 ms][DEBUG] START check_scloud [2025-09-08 17:33:03][357962502797673][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:33:03][357962502797673][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 27116 15610 24802348 225556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:33:03][357962502797673][312 ms][DEBUG] targetPkg: running [2025-09-08 17:33:03][357962502797673][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 17:33:03][357962502797673][312 ms][DEBUG] START check_boot_completed [2025-09-08 17:33:03][357962502797673][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:33:03][357962502797673][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:33:03][357962502797673][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:33:03][357962502797673][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:33:03][357962502797673][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 17:33:03][357962502797673][405 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:33:03][357962502797673][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502797673\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8461\"}'\'' -e'"" [2025-09-08 17:33:03][357962502797673][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:33:03][357962502797673][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502797673\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8461\"}'\'' -e'"" [2025-09-08 17:33:07][357962502797673][3920 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a48cebaa-6e96-48b4-8cc7-e521e0893a1b","id":"QR_a48cebaa-6e96-48b4-8cc7-e521e0893a1b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:33:07][357962502797673][4076 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=3343 [2025-09-08 17:33:07][357962502797673][4076 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-08 17:33:07][357962502797673][4076 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:33:10][357962502797673][0 ms][INFO] === Request start === [2025-09-08 17:33:10][357962502797673][1 ms][DEBUG] START check_scloud [2025-09-08 17:33:10][357962502797673][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:33:10][357962502797673][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 27116 15610 24955188 234100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:33:10][357962502797673][312 ms][DEBUG] targetPkg: running [2025-09-08 17:33:10][357962502797673][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 17:33:10][357962502797673][312 ms][DEBUG] START check_boot_completed [2025-09-08 17:33:10][357962502797673][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:33:10][357962502797673][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:33:10][357962502797673][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:33:10][357962502797673][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:33:10][357962502797673][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 17:33:10][357962502797673][406 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:33:10][357962502797673][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502797673\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9620\"}'\'' -e'"" [2025-09-08 17:33:10][357962502797673][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:33:10][357962502797673][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502797673\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9620\"}'\'' -e'"" [2025-09-08 17:33:14][357962502797673][4405 ms][DEBUG] proc_open done in 3999 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 17:33:14][357962502797673][4405 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-08 17:33:14][357962502797673][4405 ms][WARN] Detected error: Process with pid 27116 either refused to load frida-agent, or terminated during injectionProcess with pid 27116 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 17:33:14][357962502797673][4405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 17:33:14][357962502797673][4702 ms][DEBUG] SU: done in 297 ms; outsystem 15808 15610 12612008 185220 ep_poll 0 S system_server\n [2025-09-08 17:33:14][357962502797673][4702 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 17:33:14][357962502797673][4842 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 17:33:14][357962502797673][4842 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 17:33:14][357962502797673][4842 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 17:33:15][357962502797673][4967 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 17:33:15][357962502797673][4968 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 17:33:15][357962502797673][5155 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 17:33:17][357962502797673][7170 ms][DEBUG] START check_boot_completed [2025-09-08 17:33:17][357962502797673][7170 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:33:17][357962502797673][7217 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:33:17][357962502797673][7217 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:33:17][357962502797673][7263 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:33:17][357962502797673][7264 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 17:33:20][357962502797673][10278 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 17:33:20][357962502797673][10279 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502797673\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9620\"}'\'' -e'"" [2025-09-08 17:33:25][357962502797673][15043 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65a3fe5a-eeaf-4e0c-a8cf-dce7ff768c65","id":"QR_65a3fe5a-eeaf-4e0c-a8cf-dce7ff768c65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:33:25][357962502797673][15199 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-08 17:33:25][357962502797673][15199 ms][DEBUG] END runCmdUntilRes#2 in 4921 ms [2025-09-08 17:33:25][357962502797673][15199 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:35:04][359156941127992][1 ms][INFO] === Request start === [2025-09-08 17:35:04][359156941127992][1 ms][DEBUG] START check_scloud [2025-09-08 17:35:04][359156941127992][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:35:05][359156941127992][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 29460 15610 23579672 126400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:35:05][359156941127992][292 ms][DEBUG] targetPkg: running [2025-09-08 17:35:05][359156941127992][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-08 17:35:05][359156941127992][292 ms][DEBUG] START check_boot_completed [2025-09-08 17:35:05][359156941127992][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:35:05][359156941127992][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:35:05][359156941127992][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:35:05][359156941127992][371 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 17:35:05][359156941127992][371 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 17:35:05][359156941127992][371 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:35:05][359156941127992][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156941127992\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8470\"}'\'' -e'"" [2025-09-08 17:35:05][359156941127992][371 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:35:05][359156941127992][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156941127992\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8470\"}'\'' -e'"" [2025-09-08 17:35:10][359156941127992][5650 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b18de2ba-d499-45a0-badf-ae8d58507115","id":"QR_b18de2ba-d499-45a0-badf-ae8d58507115","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:35:10][359156941127992][5806 ms][DEBUG] proc_open done in 5435 ms; code=255; res.len=3343 [2025-09-08 17:35:10][359156941127992][5806 ms][DEBUG] END runCmdUntilRes#1 in 5435 ms [2025-09-08 17:35:10][359156941127992][5806 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:35:14][359156941127992][0 ms][INFO] === Request start === [2025-09-08 17:35:14][359156941127992][1 ms][DEBUG] START check_scloud [2025-09-08 17:35:14][359156941127992][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:35:14][359156941127992][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 29460 15610 23761184 137512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:35:14][359156941127992][278 ms][DEBUG] targetPkg: running [2025-09-08 17:35:14][359156941127992][278 ms][DEBUG] END check_scloud in 278 ms [2025-09-08 17:35:14][359156941127992][279 ms][DEBUG] START check_boot_completed [2025-09-08 17:35:14][359156941127992][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:35:14][359156941127992][325 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:35:14][359156941127992][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:35:14][359156941127992][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:35:14][359156941127992][372 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 17:35:14][359156941127992][372 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:35:14][359156941127992][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156941127992\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4454\"}'\'' -e'"" [2025-09-08 17:35:14][359156941127992][372 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:35:14][359156941127992][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156941127992\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4454\"}'\'' -e'"" [2025-09-08 17:35:18][359156941127992][4371 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04c31ec0-270e-4b3f-9d88-62c44d07edbb","id":"QR_04c31ec0-270e-4b3f-9d88-62c44d07edbb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:35:18][359156941127992][4527 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-09-08 17:35:18][359156941127992][4527 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-09-08 17:35:18][359156941127992][4527 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:35:21][354533280093412][0 ms][INFO] === Request start === [2025-09-08 17:35:21][354533280093412][1 ms][DEBUG] START check_scloud [2025-09-08 17:35:21][354533280093412][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:35:22][354533280093412][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 29460 15610 23906716 149260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:35:22][354533280093412][269 ms][DEBUG] targetPkg: running [2025-09-08 17:35:22][354533280093412][269 ms][DEBUG] END check_scloud in 269 ms [2025-09-08 17:35:22][354533280093412][269 ms][DEBUG] START check_boot_completed [2025-09-08 17:35:22][354533280093412][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:35:22][354533280093412][316 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:35:22][354533280093412][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:35:22][354533280093412][379 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 17:35:22][354533280093412][379 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 17:35:22][354533280093412][379 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:35:22][354533280093412][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354533280093412\",\"model\":\"SM-S916B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9111\"}'\'' -e'"" [2025-09-08 17:35:22][354533280093412][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:35:22][354533280093412][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354533280093412\",\"model\":\"SM-S916B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9111\"}'\'' -e'"" [2025-09-08 17:35:26][354533280093412][4987 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_417be599-7e12-4dad-8641-5016186326bb","id":"QR_417be599-7e12-4dad-8641-5016186326bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:35:26][354533280093412][5143 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-08 17:35:26][354533280093412][5143 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-08 17:35:26][354533280093412][5143 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:35:30][354533280093412][0 ms][INFO] === Request start === [2025-09-08 17:35:30][354533280093412][1 ms][DEBUG] START check_scloud [2025-09-08 17:35:30][354533280093412][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:35:30][354533280093412][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 29460 15610 24045120 160320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:35:30][354533280093412][322 ms][DEBUG] targetPkg: running [2025-09-08 17:35:30][354533280093412][322 ms][DEBUG] END check_scloud in 322 ms [2025-09-08 17:35:30][354533280093412][322 ms][DEBUG] START check_boot_completed [2025-09-08 17:35:30][354533280093412][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:35:30][354533280093412][354 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:35:30][354533280093412][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:35:30][354533280093412][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:35:30][354533280093412][401 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 17:35:30][354533280093412][401 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:35:30][354533280093412][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354533280093412\",\"model\":\"SM-S916B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3585\"}'\'' -e'"" [2025-09-08 17:35:30][354533280093412][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:35:30][354533280093412][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354533280093412\",\"model\":\"SM-S916B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3585\"}'\'' -e'"" [2025-09-08 17:35:34][354533280093412][4134 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8362a02-ffe6-48a8-acbc-26d15f5eb577","id":"QR_e8362a02-ffe6-48a8-acbc-26d15f5eb577","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:35:34][354533280093412][4290 ms][DEBUG] proc_open done in 3888 ms; code=255; res.len=3343 [2025-09-08 17:35:34][354533280093412][4290 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-08 17:35:34][354533280093412][4290 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:36:05][352349691756444][0 ms][INFO] === Request start === [2025-09-08 17:36:05][352349691756444][1 ms][DEBUG] START check_scloud [2025-09-08 17:36:05][352349691756444][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:36:05][352349691756444][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 29460 15610 24137436 172424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:36:05][352349691756444][318 ms][DEBUG] targetPkg: running [2025-09-08 17:36:05][352349691756444][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 17:36:05][352349691756444][318 ms][DEBUG] START check_boot_completed [2025-09-08 17:36:05][352349691756444][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:36:05][352349691756444][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:36:05][352349691756444][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:36:05][352349691756444][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:36:05][352349691756444][412 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 17:36:05][352349691756444][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:36:05][352349691756444][568 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8985\nsuccessfulTxPacketsPerSecond: 0.7973725919511119\nretriedTxPackets: 2142\nretriedTxPacketsPerSecond: 0.20261106844659402\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7947\nsuccessfulRxPacketsPerSecond: 0.7124066600218951\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:36:05][352349691756444][568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:36:07][352349691756444][2130 ms][DEBUG] SU: done in 1562 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.015/199.015/199.015/0.000 ms\n [2025-09-08 17:36:07][352349691756444][2131 ms][DEBUG] check_internet: online [2025-09-08 17:36:07][352349691756444][2131 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:36:07][352349691756444][2131 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349691756444\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2648\"}'\'' -e'"" [2025-09-08 17:36:07][352349691756444][2131 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:36:07][352349691756444][2131 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349691756444\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2648\"}'\'' -e'"" [2025-09-08 17:36:12][352349691756444][7269 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec9f7d8e-1483-410b-9c7d-50f4b4decf7e","id":"QR_ec9f7d8e-1483-410b-9c7d-50f4b4decf7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:36:12][352349691756444][7426 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 17:36:12][352349691756444][7426 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 17:36:12][352349691756444][7426 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:36:16][352349691756444][0 ms][INFO] === Request start === [2025-09-08 17:36:16][352349691756444][1 ms][DEBUG] START check_scloud [2025-09-08 17:36:16][352349691756444][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:36:16][352349691756444][298 ms][DEBUG] SU: done in 298 ms; outu0_a118 29460 15610 24288228 183384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:36:16][352349691756444][299 ms][DEBUG] targetPkg: running [2025-09-08 17:36:16][352349691756444][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 17:36:16][352349691756444][299 ms][DEBUG] START check_boot_completed [2025-09-08 17:36:16][352349691756444][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:36:16][352349691756444][345 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:36:16][352349691756444][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:36:16][352349691756444][408 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 17:36:16][352349691756444][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 17:36:16][352349691756444][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:36:16][352349691756444][517 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8985\nsuccessfulTxPacketsPerSecond: 0.7973725919511119\nretriedTxPackets: 2142\nretriedTxPacketsPerSecond: 0.20261106844659402\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7947\nsuccessfulRxPacketsPerSecond: 0.7124066600218951\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:36:16][352349691756444][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:36:17][352349691756444][892 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=272 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 272.249/272.249/272.249/0.000 ms\n [2025-09-08 17:36:17][352349691756444][892 ms][DEBUG] check_internet: online [2025-09-08 17:36:17][352349691756444][892 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:36:17][352349691756444][892 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349691756444\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8566\"}'\'' -e'"" [2025-09-08 17:36:17][352349691756444][892 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:36:17][352349691756444][892 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349691756444\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8566\"}'\'' -e'"" [2025-09-08 17:36:21][352349691756444][4766 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6576a801-5130-49d5-a4f8-5bc2eadeeefb","id":"QR_6576a801-5130-49d5-a4f8-5bc2eadeeefb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:36:21][352349691756444][4922 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-08 17:36:21][352349691756444][4923 ms][DEBUG] END runCmdUntilRes#1 in 4031 ms [2025-09-08 17:36:21][352349691756444][4923 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:38:03][358799696812390][1 ms][INFO] === Request start === [2025-09-08 17:38:03][358799696812390][1 ms][DEBUG] START check_scloud [2025-09-08 17:38:03][358799696812390][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:38:03][358799696812390][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 29460 15610 24426532 194928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:38:03][358799696812390][309 ms][DEBUG] targetPkg: running [2025-09-08 17:38:03][358799696812390][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 17:38:03][358799696812390][309 ms][DEBUG] START check_boot_completed [2025-09-08 17:38:03][358799696812390][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:38:03][358799696812390][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:38:03][358799696812390][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:38:03][358799696812390][403 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 17:38:03][358799696812390][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 17:38:03][358799696812390][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:38:03][358799696812390][527 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8985\nsuccessfulTxPacketsPerSecond: 0.7973725919511119\nretriedTxPackets: 2142\nretriedTxPacketsPerSecond: 0.20261106844659402\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7947\nsuccessfulRxPacketsPerSecond: 0.7124066600218951\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:38:03][358799696812390][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:38:04][358799696812390][808 ms][DEBUG] SU: done in 280 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.626/187.626/187.626/0.000 ms\n [2025-09-08 17:38:04][358799696812390][808 ms][DEBUG] check_internet: online [2025-09-08 17:38:04][358799696812390][808 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:38:04][358799696812390][808 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799696812390\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1416\"}'\'' -e'"" [2025-09-08 17:38:04][358799696812390][808 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:38:04][358799696812390][808 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799696812390\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1416\"}'\'' -e'"" [2025-09-08 17:38:08][358799696812390][5354 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a29d9ff5-9456-4e5b-900b-682fc56aa7fd","id":"QR_a29d9ff5-9456-4e5b-900b-682fc56aa7fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:38:08][358799696812390][5510 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-08 17:38:08][358799696812390][5511 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-08 17:38:08][358799696812390][5511 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:38:11][358799696812390][0 ms][INFO] === Request start === [2025-09-08 17:38:11][358799696812390][0 ms][DEBUG] START check_scloud [2025-09-08 17:38:11][358799696812390][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:38:11][358799696812390][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 29460 15610 24599212 205776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:38:11][358799696812390][303 ms][DEBUG] targetPkg: running [2025-09-08 17:38:11][358799696812390][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 17:38:11][358799696812390][303 ms][DEBUG] START check_boot_completed [2025-09-08 17:38:11][358799696812390][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:38:11][358799696812390][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:38:11][358799696812390][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:38:11][358799696812390][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:38:11][358799696812390][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 17:38:11][358799696812390][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:38:11][358799696812390][506 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8985\nsuccessfulTxPacketsPerSecond: 0.7973725919511119\nretriedTxPackets: 2142\nretriedTxPacketsPerSecond: 0.20261106844659402\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7947\nsuccessfulRxPacketsPerSecond: 0.7124066600218951\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:38:11][358799696812390][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:38:12][358799696812390][850 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.103/242.103/242.103/0.000 ms\n [2025-09-08 17:38:12][358799696812390][850 ms][DEBUG] check_internet: online [2025-09-08 17:38:12][358799696812390][850 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:38:12][358799696812390][850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799696812390\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7219\"}'\'' -e'"" [2025-09-08 17:38:12][358799696812390][850 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:38:12][358799696812390][850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799696812390\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7219\"}'\'' -e'"" [2025-09-08 17:38:17][358799696812390][5989 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_921d4f98-ddec-4fea-95e5-0e037427fe2b","id":"QR_921d4f98-ddec-4fea-95e5-0e037427fe2b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:38:17][358799696812390][6145 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 17:38:17][358799696812390][6145 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 17:38:17][358799696812390][6145 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:39:05][355355257924844][0 ms][INFO] === Request start === [2025-09-08 17:39:05][355355257924844][0 ms][DEBUG] START check_scloud [2025-09-08 17:39:05][355355257924844][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:39:06][355355257924844][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 29460 15610 24692524 216944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:39:06][355355257924844][308 ms][DEBUG] targetPkg: running [2025-09-08 17:39:06][355355257924844][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 17:39:06][355355257924844][309 ms][DEBUG] START check_boot_completed [2025-09-08 17:39:06][355355257924844][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:39:06][355355257924844][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:39:06][355355257924844][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:39:06][355355257924844][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 17:39:06][355355257924844][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 17:39:06][355355257924844][418 ms][DEBUG] rawBody.length=1149 [2025-09-08 17:39:06][355355257924844][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924844\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6566\"}'\'' -e'"" [2025-09-08 17:39:06][355355257924844][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:39:06][355355257924844][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924844\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6566\"}'\'' -e'"" [2025-09-08 17:39:10][355355257924844][4823 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 17:39:10][355355257924844][4979 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=115 [2025-09-08 17:39:10][355355257924844][4979 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-08 17:39:10][355355257924844][4979 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 17:39:11][][0 ms][INFO] === Request start === [2025-09-08 17:39:11][][0 ms][DEBUG] START check_scloud [2025-09-08 17:39:11][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:39:11][][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 29460 15610 24835124 228772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:39:11][][300 ms][DEBUG] targetPkg: running [2025-09-08 17:39:11][][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 17:39:11][][300 ms][DEBUG] START check_boot_completed [2025-09-08 17:39:11][][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:39:11][][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:39:11][][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:39:11][][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:39:11][][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:39:11][][378 ms][DEBUG] rawBody.length=1130 [2025-09-08 17:39:11][][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YTC049GHE\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9213\"}'\'' -e'"" [2025-09-08 17:39:11][][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:39:11][][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YTC049GHE\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9213\"}'\'' -e'"" [2025-09-08 17:39:14][][3408 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 17:39:14][][3564 ms][DEBUG] proc_open done in 3187 ms; code=255; res.len=115 [2025-09-08 17:39:14][][3564 ms][DEBUG] END runCmdUntilRes#1 in 3187 ms [2025-09-08 17:39:14][][3565 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 17:39:16][355355257924844][0 ms][INFO] === Request start === [2025-09-08 17:39:16][355355257924844][1 ms][DEBUG] START check_scloud [2025-09-08 17:39:16][355355257924844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:39:16][355355257924844][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 29460 15610 25012412 240580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:39:16][355355257924844][253 ms][DEBUG] targetPkg: running [2025-09-08 17:39:16][355355257924844][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-08 17:39:16][355355257924844][253 ms][DEBUG] START check_boot_completed [2025-09-08 17:39:16][355355257924844][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:39:16][355355257924844][283 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:39:16][355355257924844][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:39:16][355355257924844][330 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:39:16][355355257924844][330 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:39:16][355355257924844][330 ms][DEBUG] rawBody.length=1159 [2025-09-08 17:39:16][355355257924844][330 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924844\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5987\"}'\'' -e'"" [2025-09-08 17:39:16][355355257924844][330 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:39:16][355355257924844][330 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924844\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5987\"}'\'' -e'"" [2025-09-08 17:39:20][355355257924844][4064 ms][DEBUG] proc_open done in 3733 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 17:39:20][355355257924844][4064 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-08 17:39:20][355355257924844][4064 ms][WARN] Detected error: Process with pid 29460 either refused to load frida-agent, or terminated during injectionProcess with pid 29460 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 17:39:20][355355257924844][4064 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 17:39:20][355355257924844][4345 ms][DEBUG] SU: done in 281 ms; outsystem 15808 15610 12709060 185396 ep_poll 0 S system_server\n [2025-09-08 17:39:20][355355257924844][4345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 17:39:20][355355257924844][4470 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 17:39:20][355355257924844][4470 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 17:39:20][355355257924844][4470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 17:39:20][355355257924844][4579 ms][DEBUG] SU: done in 109 ms; out [2025-09-08 17:39:20][355355257924844][4579 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 17:39:21][355355257924844][4720 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 17:39:23][355355257924844][6735 ms][DEBUG] START check_boot_completed [2025-09-08 17:39:23][355355257924844][6735 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:39:23][355355257924844][6782 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:39:23][355355257924844][6782 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:39:23][355355257924844][6829 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:39:23][355355257924844][6829 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 17:39:26][355355257924844][9844 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 17:39:26][355355257924844][9844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924844\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5987\"}'\'' -e'"" [2025-09-08 17:39:29][355355257924844][13655 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 17:39:30][355355257924844][13811 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=107 [2025-09-08 17:39:30][355355257924844][13812 ms][DEBUG] END runCmdUntilRes#2 in 3968 ms [2025-09-08 17:39:30][355355257924844][13812 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 17:39:30][][0 ms][INFO] === Request start === [2025-09-08 17:39:30][][0 ms][DEBUG] START check_scloud [2025-09-08 17:39:30][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:39:30][][232 ms][DEBUG] SU: done in 232 ms; outu0_a118 30773 15610 23579392 123280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:39:30][][232 ms][DEBUG] targetPkg: running [2025-09-08 17:39:30][][232 ms][DEBUG] END check_scloud in 232 ms [2025-09-08 17:39:30][][232 ms][DEBUG] START check_boot_completed [2025-09-08 17:39:30][][232 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:39:30][][263 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:39:30][][263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:39:30][][310 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:39:30][][310 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:39:30][][310 ms][DEBUG] rawBody.length=1140 [2025-09-08 17:39:30][][310 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9YTC049GHE\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9199\"}'\'' -e'"" [2025-09-08 17:39:30][][310 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:39:30][][310 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9YTC049GHE\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9199\"}'\'' -e'"" [2025-09-08 17:39:35][][4794 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 17:39:35][][4950 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=107 [2025-09-08 17:39:35][][4950 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-08 17:39:35][][4950 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 17:43:03][351681591451044][1 ms][INFO] === Request start === [2025-09-08 17:43:03][351681591451044][1 ms][DEBUG] START check_scloud [2025-09-08 17:43:03][351681591451044][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:43:03][351681591451044][317 ms][DEBUG] SU: done in 315 ms; outu0_a118 30773 15610 23671408 137856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:43:03][351681591451044][317 ms][DEBUG] targetPkg: running [2025-09-08 17:43:03][351681591451044][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 17:43:03][351681591451044][317 ms][DEBUG] START check_boot_completed [2025-09-08 17:43:03][351681591451044][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:43:03][351681591451044][348 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:43:03][351681591451044][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:43:03][351681591451044][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:43:03][351681591451044][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:43:03][351681591451044][395 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:43:03][351681591451044][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681591451044\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2612\"}'\'' -e'"" [2025-09-08 17:43:03][351681591451044][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:43:03][351681591451044][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681591451044\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2612\"}'\'' -e'"" [2025-09-08 17:43:08][351681591451044][5097 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43e57272-779a-4e14-b889-39e6e2b0ed29","id":"QR_43e57272-779a-4e14-b889-39e6e2b0ed29","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:43:08][351681591451044][5253 ms][DEBUG] proc_open done in 4857 ms; code=255; res.len=3343 [2025-09-08 17:43:08][351681591451044][5253 ms][DEBUG] END runCmdUntilRes#1 in 4857 ms [2025-09-08 17:43:08][351681591451044][5253 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:43:10][351681591451044][0 ms][INFO] === Request start === [2025-09-08 17:43:10][351681591451044][1 ms][DEBUG] START check_scloud [2025-09-08 17:43:10][351681591451044][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:43:11][351681591451044][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 30773 15610 23846584 149424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:43:11][351681591451044][285 ms][DEBUG] targetPkg: running [2025-09-08 17:43:11][351681591451044][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-08 17:43:11][351681591451044][285 ms][DEBUG] START check_boot_completed [2025-09-08 17:43:11][351681591451044][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:43:11][351681591451044][316 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:43:11][351681591451044][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:43:11][351681591451044][378 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 17:43:11][351681591451044][379 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 17:43:11][351681591451044][379 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:43:11][351681591451044][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681591451044\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2835\"}'\'' -e'"" [2025-09-08 17:43:11][351681591451044][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:43:11][351681591451044][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681591451044\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2835\"}'\'' -e'"" [2025-09-08 17:43:15][351681591451044][4987 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7d015a9-7c5d-47bf-a305-7ed8a9d570f7","id":"QR_b7d015a9-7c5d-47bf-a305-7ed8a9d570f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:43:16][351681591451044][5143 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-08 17:43:16][351681591451044][5143 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-08 17:43:16][351681591451044][5143 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:45:03][355235300626622][0 ms][INFO] === Request start === [2025-09-08 17:45:03][355235300626622][1 ms][DEBUG] START check_scloud [2025-09-08 17:45:03][355235300626622][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:45:04][355235300626622][337 ms][DEBUG] SU: done in 336 ms; outu0_a118 30773 15610 23975764 160976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:45:04][355235300626622][337 ms][DEBUG] targetPkg: running [2025-09-08 17:45:04][355235300626622][337 ms][DEBUG] END check_scloud in 336 ms [2025-09-08 17:45:04][355235300626622][337 ms][DEBUG] START check_boot_completed [2025-09-08 17:45:04][355235300626622][337 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:45:04][355235300626622][368 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:45:04][355235300626622][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:45:04][355235300626622][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:45:04][355235300626622][415 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:45:04][355235300626622][415 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:45:04][355235300626622][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355235300626622\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5761\"}'\'' -e'"" [2025-09-08 17:45:04][355235300626622][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:45:04][355235300626622][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355235300626622\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5761\"}'\'' -e'"" [2025-09-08 17:45:08][355235300626622][5101 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74501520-ed20-45ee-8410-53ad638acec6","id":"QR_74501520-ed20-45ee-8410-53ad638acec6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:45:08][355235300626622][5257 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-08 17:45:08][355235300626622][5258 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-08 17:45:08][355235300626622][5258 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:45:11][355235300626622][1 ms][INFO] === Request start === [2025-09-08 17:45:11][355235300626622][1 ms][DEBUG] START check_scloud [2025-09-08 17:45:11][355235300626622][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:45:11][355235300626622][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 30773 15610 24144732 171172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:45:11][355235300626622][280 ms][DEBUG] targetPkg: running [2025-09-08 17:45:11][355235300626622][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-08 17:45:11][355235300626622][280 ms][DEBUG] START check_boot_completed [2025-09-08 17:45:11][355235300626622][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:45:11][355235300626622][327 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:45:11][355235300626622][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:45:11][355235300626622][389 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 17:45:11][355235300626622][389 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 17:45:11][355235300626622][389 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:45:11][355235300626622][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355235300626622\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4787\"}'\'' -e'"" [2025-09-08 17:45:11][355235300626622][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:45:11][355235300626622][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355235300626622\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4787\"}'\'' -e'"" [2025-09-08 17:45:16][355235300626622][5232 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_15d1e38d-9d3e-474b-aa90-2ac503c6eb9f","id":"QR_15d1e38d-9d3e-474b-aa90-2ac503c6eb9f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:45:16][355235300626622][5388 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-08 17:45:16][355235300626622][5388 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-08 17:45:16][355235300626622][5388 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:48:03][352549932667736][1 ms][INFO] === Request start === [2025-09-08 17:48:03][352549932667736][1 ms][DEBUG] START check_scloud [2025-09-08 17:48:03][352549932667736][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:48:03][352549932667736][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 30773 15610 24258588 183196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:48:03][352549932667736][308 ms][DEBUG] targetPkg: running [2025-09-08 17:48:03][352549932667736][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 17:48:03][352549932667736][308 ms][DEBUG] START check_boot_completed [2025-09-08 17:48:03][352549932667736][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:48:03][352549932667736][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:48:03][352549932667736][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:48:03][352549932667736][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:48:03][352549932667736][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:48:03][352549932667736][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:48:03][352549932667736][496 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 9275\nsuccessfulTxPacketsPerSecond: 0.28293879090823354\nretriedTxPackets: 2233\nretriedTxPacketsPerSecond: 0.08934909186575796\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8181\nsuccessfulRxPacketsPerSecond: 0.2531557602863142\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:48:03][352549932667736][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:48:05][352549932667736][2042 ms][DEBUG] SU: done in 1546 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.119/201.119/201.119/0.000 ms\n [2025-09-08 17:48:05][352549932667736][2042 ms][DEBUG] check_internet: online [2025-09-08 17:48:05][352549932667736][2042 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:48:05][352549932667736][2042 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549932667736\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8737\"}'\'' -e'"" [2025-09-08 17:48:05][352549932667736][2042 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:48:05][352549932667736][2042 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549932667736\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8737\"}'\'' -e'"" [2025-09-08 17:48:09][352549932667736][6275 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18715308-b9b9-4660-bd1a-38b2135204a8","id":"QR_18715308-b9b9-4660-bd1a-38b2135204a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:48:09][352549932667736][6432 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-08 17:48:09][352549932667736][6432 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-08 17:48:09][352549932667736][6432 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:48:11][352549932667736][0 ms][INFO] === Request start === [2025-09-08 17:48:11][352549932667736][1 ms][DEBUG] START check_scloud [2025-09-08 17:48:11][352549932667736][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:48:12][352549932667736][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 30773 15610 24407204 187792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:48:12][352549932667736][306 ms][DEBUG] targetPkg: running [2025-09-08 17:48:12][352549932667736][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 17:48:12][352549932667736][306 ms][DEBUG] START check_boot_completed [2025-09-08 17:48:12][352549932667736][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:48:12][352549932667736][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:48:12][352549932667736][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:48:12][352549932667736][415 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 17:48:12][352549932667736][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 17:48:12][352549932667736][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:48:12][352549932667736][540 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 9275\nsuccessfulTxPacketsPerSecond: 0.28293879090823354\nretriedTxPackets: 2233\nretriedTxPacketsPerSecond: 0.08934909186575796\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8181\nsuccessfulRxPacketsPerSecond: 0.2531557602863142\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:48:12][352549932667736][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:48:12][352549932667736][946 ms][DEBUG] SU: done in 406 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.637/267.637/267.637/0.000 ms\n [2025-09-08 17:48:12][352549932667736][946 ms][DEBUG] check_internet: online [2025-09-08 17:48:12][352549932667736][946 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:48:12][352549932667736][946 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549932667736\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3615\"}'\'' -e'"" [2025-09-08 17:48:12][352549932667736][946 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:48:12][352549932667736][946 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549932667736\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3615\"}'\'' -e'"" [2025-09-08 17:48:17][352549932667736][5398 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da192ce8-3ff5-4cf1-8ee9-beba65de9107","id":"QR_da192ce8-3ff5-4cf1-8ee9-beba65de9107","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:48:17][352549932667736][5554 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-08 17:48:17][352549932667736][5554 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-08 17:48:17][352549932667736][5554 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:49:04][352469856643482][0 ms][INFO] === Request start === [2025-09-08 17:49:04][352469856643482][1 ms][DEBUG] START check_scloud [2025-09-08 17:49:04][352469856643482][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:49:04][352469856643482][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 30773 15610 24496356 166108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:49:04][352469856643482][312 ms][DEBUG] targetPkg: running [2025-09-08 17:49:04][352469856643482][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 17:49:04][352469856643482][312 ms][DEBUG] START check_boot_completed [2025-09-08 17:49:04][352469856643482][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:49:04][352469856643482][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:49:04][352469856643482][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:49:04][352469856643482][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:49:04][352469856643482][390 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 17:49:04][352469856643482][390 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:49:04][352469856643482][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469856643482\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9400\"}'\'' -e'"" [2025-09-08 17:49:04][352469856643482][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:49:04][352469856643482][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469856643482\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9400\"}'\'' -e'"" [2025-09-08 17:49:07][352469856643482][3858 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9628fad5-8137-44c3-b9da-5b189c936381","id":"QR_9628fad5-8137-44c3-b9da-5b189c936381","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:49:08][352469856643482][4014 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=3343 [2025-09-08 17:49:08][352469856643482][4014 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-08 17:49:08][352469856643482][4014 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:49:10][352469856643482][0 ms][INFO] === Request start === [2025-09-08 17:49:10][352469856643482][1 ms][DEBUG] START check_scloud [2025-09-08 17:49:10][352469856643482][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:49:10][352469856643482][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 30773 15610 24690092 176780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:49:10][352469856643482][274 ms][DEBUG] targetPkg: running [2025-09-08 17:49:10][352469856643482][274 ms][DEBUG] END check_scloud in 273 ms [2025-09-08 17:49:10][352469856643482][274 ms][DEBUG] START check_boot_completed [2025-09-08 17:49:10][352469856643482][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:49:10][352469856643482][305 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:49:10][352469856643482][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:49:10][352469856643482][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:49:10][352469856643482][352 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:49:10][352469856643482][352 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:49:10][352469856643482][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469856643482\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5874\"}'\'' -e'"" [2025-09-08 17:49:10][352469856643482][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:49:10][352469856643482][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469856643482\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5874\"}'\'' -e'"" [2025-09-08 17:49:15][352469856643482][4882 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eaf52a67-5ac9-4730-b823-c913ee4e40fb","id":"QR_eaf52a67-5ac9-4730-b823-c913ee4e40fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:49:15][352469856643482][5038 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-08 17:49:15][352469856643482][5038 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-08 17:49:15][352469856643482][5038 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:49:19][350129471262223][0 ms][INFO] === Request start === [2025-09-08 17:49:19][350129471262223][1 ms][DEBUG] START check_scloud [2025-09-08 17:49:19][350129471262223][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:49:19][350129471262223][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 30773 15610 24828404 188572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:49:19][350129471262223][323 ms][DEBUG] targetPkg: running [2025-09-08 17:49:19][350129471262223][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-08 17:49:19][350129471262223][323 ms][DEBUG] START check_boot_completed [2025-09-08 17:49:19][350129471262223][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:49:19][350129471262223][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:49:19][350129471262223][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:49:20][350129471262223][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:49:20][350129471262223][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 17:49:20][350129471262223][416 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:49:20][350129471262223][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350129471262223\",\"model\":\"SM-M625F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6806\"}'\'' -e'"" [2025-09-08 17:49:20][350129471262223][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:49:20][350129471262223][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350129471262223\",\"model\":\"SM-M625F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6806\"}'\'' -e'"" [2025-09-08 17:49:24][350129471262223][5087 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a9c7b34-450c-40e1-ae59-55a46e1e4395","id":"QR_8a9c7b34-450c-40e1-ae59-55a46e1e4395","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:49:24][350129471262223][5243 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-08 17:49:24][350129471262223][5243 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-08 17:49:24][350129471262223][5243 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:49:27][350129471262223][0 ms][INFO] === Request start === [2025-09-08 17:49:27][350129471262223][1 ms][DEBUG] START check_scloud [2025-09-08 17:49:27][350129471262223][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:49:27][350129471262223][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 30773 15610 24951568 200352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:49:27][350129471262223][278 ms][DEBUG] targetPkg: running [2025-09-08 17:49:27][350129471262223][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-08 17:49:27][350129471262223][278 ms][DEBUG] START check_boot_completed [2025-09-08 17:49:27][350129471262223][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:49:27][350129471262223][324 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:49:27][350129471262223][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:49:27][350129471262223][387 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 17:49:27][350129471262223][387 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 17:49:27][350129471262223][387 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:49:27][350129471262223][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350129471262223\",\"model\":\"SM-M625F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5630\"}'\'' -e'"" [2025-09-08 17:49:27][350129471262223][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:49:27][350129471262223][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350129471262223\",\"model\":\"SM-M625F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5630\"}'\'' -e'"" [2025-09-08 17:49:31][350129471262223][4245 ms][DEBUG] proc_open done in 3859 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 17:49:31][350129471262223][4245 ms][DEBUG] END runCmdUntilRes#1 in 3859 ms [2025-09-08 17:49:31][350129471262223][4245 ms][WARN] Detected error: Process with pid 30773 either refused to load frida-agent, or terminated during injectionProcess with pid 30773 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 17:49:31][350129471262223][4246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 17:49:31][350129471262223][4511 ms][DEBUG] SU: done in 265 ms; outsystem 15808 15610 12828844 216308 ep_poll 0 S system_server\n [2025-09-08 17:49:31][350129471262223][4511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 17:49:31][350129471262223][4651 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 17:49:31][350129471262223][4652 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 17:49:31][350129471262223][4652 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 17:49:31][350129471262223][4777 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 17:49:31][350129471262223][4777 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 17:49:32][350129471262223][4950 ms][DEBUG] SU: done in 173 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 17:49:34][350129471262223][6963 ms][DEBUG] START check_boot_completed [2025-09-08 17:49:34][350129471262223][6963 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:49:34][350129471262223][7010 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:49:34][350129471262223][7011 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:49:34][350129471262223][7073 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 17:49:34][350129471262223][7073 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 17:49:37][350129471262223][10087 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 17:49:37][350129471262223][10088 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350129471262223\",\"model\":\"SM-M625F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5630\"}'\'' -e'"" [2025-09-08 17:49:42][350129471262223][14993 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b51de4c3-e5cd-4051-8846-8df268e3a753","id":"QR_b51de4c3-e5cd-4051-8846-8df268e3a753","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:49:42][350129471262223][15149 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-08 17:49:42][350129471262223][15149 ms][DEBUG] END runCmdUntilRes#2 in 5061 ms [2025-09-08 17:49:42][350129471262223][15149 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:50:03][357962508136462][0 ms][INFO] === Request start === [2025-09-08 17:50:03][357962508136462][1 ms][DEBUG] START check_scloud [2025-09-08 17:50:03][357962508136462][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:50:04][357962508136462][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 32698 15610 23552472 126764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:50:04][357962508136462][314 ms][DEBUG] targetPkg: running [2025-09-08 17:50:04][357962508136462][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 17:50:04][357962508136462][314 ms][DEBUG] START check_boot_completed [2025-09-08 17:50:04][357962508136462][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:50:04][357962508136462][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 17:50:04][357962508136462][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:50:04][357962508136462][409 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 17:50:04][357962508136462][409 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 17:50:04][357962508136462][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:50:04][357962508136462][533 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 9465\nsuccessfulTxPacketsPerSecond: 0.6322542860185284\nretriedTxPackets: 2284\nretriedTxPacketsPerSecond: 0.16971036098392078\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8342\nsuccessfulRxPacketsPerSecond: 0.5357523160472794\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:50:04][357962508136462][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:50:04][357962508136462][846 ms][DEBUG] SU: done in 313 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.252/200.252/200.252/0.000 ms\n [2025-09-08 17:50:04][357962508136462][847 ms][DEBUG] check_internet: online [2025-09-08 17:50:04][357962508136462][847 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:50:04][357962508136462][847 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508136462\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2632\"}'\'' -e'"" [2025-09-08 17:50:04][357962508136462][847 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:50:04][357962508136462][847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508136462\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2632\"}'\'' -e'"" [2025-09-08 17:50:08][357962508136462][4469 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91e92c3e-e71b-49f2-8168-a831c7d4c26c","id":"QR_91e92c3e-e71b-49f2-8168-a831c7d4c26c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:50:08][357962508136462][4625 ms][DEBUG] proc_open done in 3778 ms; code=255; res.len=3343 [2025-09-08 17:50:08][357962508136462][4625 ms][DEBUG] END runCmdUntilRes#1 in 3778 ms [2025-09-08 17:50:08][357962508136462][4626 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:50:10][357962508136462][1 ms][INFO] === Request start === [2025-09-08 17:50:10][357962508136462][1 ms][DEBUG] START check_scloud [2025-09-08 17:50:10][357962508136462][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:50:11][357962508136462][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 32698 15610 23710616 137512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:50:11][357962508136462][319 ms][DEBUG] targetPkg: running [2025-09-08 17:50:11][357962508136462][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 17:50:11][357962508136462][319 ms][DEBUG] START check_boot_completed [2025-09-08 17:50:11][357962508136462][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:50:11][357962508136462][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:50:11][357962508136462][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:50:11][357962508136462][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:50:11][357962508136462][398 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 17:50:11][357962508136462][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:50:11][357962508136462][523 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 9465\nsuccessfulTxPacketsPerSecond: 0.6322542860185284\nretriedTxPackets: 2284\nretriedTxPacketsPerSecond: 0.16971036098392078\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8342\nsuccessfulRxPacketsPerSecond: 0.5357523160472794\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:50:11][357962508136462][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:50:11][357962508136462][835 ms][DEBUG] SU: done in 311 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=209 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 209.309/209.309/209.309/0.000 ms\n [2025-09-08 17:50:11][357962508136462][835 ms][DEBUG] check_internet: online [2025-09-08 17:50:11][357962508136462][835 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:50:11][357962508136462][835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508136462\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2778\"}'\'' -e'"" [2025-09-08 17:50:11][357962508136462][835 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:50:11][357962508136462][835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508136462\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2778\"}'\'' -e'"" [2025-09-08 17:50:16][357962508136462][5474 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5885b354-7b80-41ea-97c5-d0bca248bf59","id":"QR_5885b354-7b80-41ea-97c5-d0bca248bf59","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:50:16][357962508136462][5631 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 17:50:16][357962508136462][5631 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 17:50:16][357962508136462][5631 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:56:03][353684141756027][1 ms][INFO] === Request start === [2025-09-08 17:56:03][353684141756027][1 ms][DEBUG] START check_scloud [2025-09-08 17:56:03][353684141756027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:56:03][353684141756027][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 32698 15610 23808040 149316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:56:03][353684141756027][289 ms][DEBUG] targetPkg: running [2025-09-08 17:56:03][353684141756027][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-08 17:56:03][353684141756027][289 ms][DEBUG] START check_boot_completed [2025-09-08 17:56:03][353684141756027][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:56:03][353684141756027][320 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:56:03][353684141756027][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:56:03][353684141756027][383 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 17:56:03][353684141756027][383 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 17:56:03][353684141756027][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:56:03][353684141756027][524 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 9607\nsuccessfulTxPacketsPerSecond: 0.5029504062564197\nretriedTxPackets: 2330\nretriedTxPacketsPerSecond: 0.1629275963929247\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8460\nsuccessfulRxPacketsPerSecond: 0.41794470379054594\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:56:03][353684141756027][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:56:05][353684141756027][1930 ms][DEBUG] SU: done in 1405 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.938/194.938/194.938/0.000 ms\n [2025-09-08 17:56:05][353684141756027][1930 ms][DEBUG] check_internet: online [2025-09-08 17:56:05][353684141756027][1930 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:56:05][353684141756027][1930 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141756027\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8529\"}'\'' -e'"" [2025-09-08 17:56:05][353684141756027][1930 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:56:05][353684141756027][1930 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141756027\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8529\"}'\'' -e'"" [2025-09-08 17:56:09][353684141756027][5788 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b7cb4b1-bf73-46b0-86b9-a9c58f4bafdb","id":"QR_6b7cb4b1-bf73-46b0-86b9-a9c58f4bafdb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:56:09][353684141756027][5944 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-09-08 17:56:09][353684141756027][5944 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-09-08 17:56:09][353684141756027][5944 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:56:11][353684141756027][0 ms][INFO] === Request start === [2025-09-08 17:56:11][353684141756027][0 ms][DEBUG] START check_scloud [2025-09-08 17:56:11][353684141756027][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:56:11][353684141756027][239 ms][DEBUG] SU: done in 238 ms; outu0_a118 32698 15610 23942320 160416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:56:11][353684141756027][239 ms][DEBUG] targetPkg: running [2025-09-08 17:56:11][353684141756027][239 ms][DEBUG] END check_scloud in 238 ms [2025-09-08 17:56:11][353684141756027][239 ms][DEBUG] START check_boot_completed [2025-09-08 17:56:11][353684141756027][239 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:56:11][353684141756027][270 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:56:11][353684141756027][270 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:56:11][353684141756027][317 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:56:11][353684141756027][317 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:56:11][353684141756027][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 17:56:12][353684141756027][426 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=136539 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 9607\nsuccessfulTxPacketsPerSecond: 0.5029504062564197\nretriedTxPackets: 2330\nretriedTxPacketsPerSecond: 0.1629275963929247\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 8460\nsuccessfulRxPacketsPerSecond: 0.41794470379054594\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 17:56:12][353684141756027][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 17:56:12][353684141756027][707 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.206/182.206/182.206/0.000 ms\n [2025-09-08 17:56:12][353684141756027][707 ms][DEBUG] check_internet: online [2025-09-08 17:56:12][353684141756027][707 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:56:12][353684141756027][707 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141756027\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4837\"}'\'' -e'"" [2025-09-08 17:56:12][353684141756027][707 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:56:12][353684141756027][707 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141756027\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4837\"}'\'' -e'"" [2025-09-08 17:56:17][353684141756027][5753 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8f2d5ae-6649-45b1-8c73-3db1ed167f06","id":"QR_d8f2d5ae-6649-45b1-8c73-3db1ed167f06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:56:17][353684141756027][5909 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-08 17:56:17][353684141756027][5909 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-08 17:56:17][353684141756027][5909 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:59:05][350962634992140][1 ms][INFO] === Request start === [2025-09-08 17:59:05][350962634992140][1 ms][DEBUG] START check_scloud [2025-09-08 17:59:05][350962634992140][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:59:05][350962634992140][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 32698 15610 24078704 171640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:59:05][350962634992140][249 ms][DEBUG] targetPkg: running [2025-09-08 17:59:05][350962634992140][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-08 17:59:05][350962634992140][249 ms][DEBUG] START check_boot_completed [2025-09-08 17:59:05][350962634992140][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:59:05][350962634992140][280 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 17:59:05][350962634992140][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:59:05][350962634992140][327 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 17:59:05][350962634992140][327 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 17:59:05][350962634992140][327 ms][DEBUG] rawBody.length=1160 [2025-09-08 17:59:05][350962634992140][327 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962634992140\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5245\"}'\'' -e'"" [2025-09-08 17:59:05][350962634992140][327 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:59:05][350962634992140][327 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962634992140\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5245\"}'\'' -e'"" [2025-09-08 17:59:11][350962634992140][6200 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_90f32c22-fd42-42a9-8c71-054e3cf4d274","id":"QR_90f32c22-fd42-42a9-8c71-054e3cf4d274","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 17:59:11][350962634992140][6357 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-09-08 17:59:11][350962634992140][6357 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-09-08 17:59:11][350962634992140][6357 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 17:59:15][350962634992140][0 ms][INFO] === Request start === [2025-09-08 17:59:15][350962634992140][1 ms][DEBUG] START check_scloud [2025-09-08 17:59:15][350962634992140][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 17:59:15][350962634992140][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 32698 15610 24260088 183344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 17:59:15][350962634992140][287 ms][DEBUG] targetPkg: running [2025-09-08 17:59:15][350962634992140][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-08 17:59:15][350962634992140][287 ms][DEBUG] START check_boot_completed [2025-09-08 17:59:15][350962634992140][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 17:59:15][350962634992140][334 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 17:59:15][350962634992140][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 17:59:15][350962634992140][412 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 17:59:15][350962634992140][412 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 17:59:15][350962634992140][412 ms][DEBUG] rawBody.length=1150 [2025-09-08 17:59:15][350962634992140][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962634992140\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4017\"}'\'' -e'"" [2025-09-08 17:59:15][350962634992140][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 17:59:15][350962634992140][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962634992140\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4017\"}'\'' -e'"" [2025-09-08 17:59:16][350962634992140][990 ms][DEBUG] proc_open done in 578 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-08 17:59:16][350962634992140][990 ms][DEBUG] END runCmdUntilRes#1 in 578 ms [2025-09-08 17:59:16][350962634992140][990 ms][WARN] Detected system_server; Reboot the device Unable to find process with name 'system_server'Unable to find process with name 'system_server'\r\n [2025-09-08 17:59:16][350962634992140][990 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 17:59:16][350962634992140][1599 ms][DEBUG] SU: done in 609 ms; out [2025-09-08 17:59:16][350962634992140][1600 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-08 17:59:17][350962634992140][2536 ms][DEBUG] SU: done in 937 ms; out [2025-09-08 18:00:03][353520953293230][0 ms][INFO] === Request start === [2025-09-08 18:00:03][353520953293230][1 ms][DEBUG] START check_scloud [2025-09-08 18:00:03][353520953293230][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:00:03][353520953293230][48 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:00:03][353520953293230][48 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:00:03][353520953293230][79 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-08 18:00:03][353520953293230][79 ms][WARN] check_devices: no device [2025-09-08 18:00:03][353520953293230][79 ms][WARN] check_devices: no device [2025-09-08 18:00:03][353520953293230][79 ms][DEBUG] END check_scloud in 78 ms [2025-09-08 18:01:03][353520953293230][0 ms][INFO] === Request start === [2025-09-08 18:01:03][353520953293230][1 ms][DEBUG] START check_scloud [2025-09-08 18:01:03][353520953293230][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:01:04][353520953293230][397 ms][DEBUG] SU: done in 397 ms; out [2025-09-08 18:01:04][353520953293230][397 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:01:04][353520953293230][444 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 18:01:04][353520953293230][444 ms][DEBUG] check_devices: device found [2025-09-08 18:01:04][353520953293230][444 ms][WARN] targetPkg: not running, restarting [2025-09-08 18:01:04][353520953293230][444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:01:04][353520953293230][569 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 18:01:04][353520953293230][569 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:01:04][353520953293230][1038 ms][DEBUG] SU: done in 469 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 18:01:06][353520953293230][3053 ms][DEBUG] END check_scloud in 3052 ms [2025-09-08 18:01:06][353520953293230][3053 ms][DEBUG] START check_boot_completed [2025-09-08 18:01:06][353520953293230][3053 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:01:06][353520953293230][3100 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:01:06][353520953293230][3100 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:01:06][353520953293230][3194 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 18:01:06][353520953293230][3194 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-08 18:01:06][353520953293230][3194 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:01:06][353520953293230][3194 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520953293230\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5755\"}'\'' -e'"" [2025-09-08 18:01:06][353520953293230][3194 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:01:06][353520953293230][3194 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520953293230\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5755\"}'\'' -e'"" [2025-09-08 18:01:12][353520953293230][8317 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad598978-3166-4dc9-b69e-452e168d1831","id":"QR_ad598978-3166-4dc9-b69e-452e168d1831","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:01:12][353520953293230][8473 ms][DEBUG] proc_open done in 5279 ms; code=255; res.len=3343 [2025-09-08 18:01:12][353520953293230][8473 ms][DEBUG] END runCmdUntilRes#1 in 5279 ms [2025-09-08 18:01:12][353520953293230][8473 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:01:14][353520953293230][1 ms][INFO] === Request start === [2025-09-08 18:01:14][353520953293230][1 ms][DEBUG] START check_scloud [2025-09-08 18:01:14][353520953293230][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:01:14][353520953293230][368 ms][DEBUG] SU: done in 367 ms; outu0_a118 11889 4972 23665252 126052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:01:14][353520953293230][368 ms][DEBUG] targetPkg: running [2025-09-08 18:01:14][353520953293230][368 ms][DEBUG] END check_scloud in 367 ms [2025-09-08 18:01:14][353520953293230][368 ms][DEBUG] START check_boot_completed [2025-09-08 18:01:14][353520953293230][368 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:01:15][353520953293230][415 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:01:15][353520953293230][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:01:15][353520953293230][477 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 18:01:15][353520953293230][477 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:01:15][353520953293230][477 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:01:15][353520953293230][477 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520953293230\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6257\"}'\'' -e'"" [2025-09-08 18:01:15][353520953293230][478 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:01:15][353520953293230][478 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520953293230\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6257\"}'\'' -e'"" [2025-09-08 18:01:19][353520953293230][5054 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e1227ce2-26df-4264-af86-328eeb677876","id":"QR_e1227ce2-26df-4264-af86-328eeb677876","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:01:19][353520953293230][5210 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-08 18:01:19][353520953293230][5210 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-08 18:01:19][353520953293230][5210 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:06:03][358080740613492][1 ms][INFO] === Request start === [2025-09-08 18:06:03][358080740613492][1 ms][DEBUG] START check_scloud [2025-09-08 18:06:03][358080740613492][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:06:03][358080740613492][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 11889 4972 23754704 78784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:06:03][358080740613492][293 ms][DEBUG] targetPkg: running [2025-09-08 18:06:03][358080740613492][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-08 18:06:03][358080740613492][294 ms][DEBUG] START check_boot_completed [2025-09-08 18:06:03][358080740613492][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:06:03][358080740613492][324 ms][DEBUG] ADB: done in 30 ms; out [2025-09-08 18:06:03][358080740613492][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:06:03][358080740613492][371 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:06:03][358080740613492][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 18:06:03][358080740613492][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:06:04][358080740613492][497 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30857 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 943\nsuccessfulTxPacketsPerSecond: 2.127814352744335\nretriedTxPackets: 95\nretriedTxPacketsPerSecond: 0.21460008002036882\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 998\nsuccessfulRxPacketsPerSecond: 2.360600880224057\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:06:04][358080740613492][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:06:05][358080740613492][1951 ms][DEBUG] SU: done in 1454 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.105/200.105/200.105/0.000 ms\n [2025-09-08 18:06:05][358080740613492][1951 ms][DEBUG] check_internet: online [2025-09-08 18:06:05][358080740613492][1951 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:06:05][358080740613492][1951 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080740613492\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6163\"}'\'' -e'"" [2025-09-08 18:06:05][358080740613492][1951 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:06:05][358080740613492][1951 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080740613492\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6163\"}'\'' -e'"" [2025-09-08 18:06:09][358080740613492][6401 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab235e8c-8023-48f7-8071-2b7d71530888","id":"QR_ab235e8c-8023-48f7-8071-2b7d71530888","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:06:10][358080740613492][6557 ms][DEBUG] proc_open done in 4605 ms; code=255; res.len=3343 [2025-09-08 18:06:10][358080740613492][6557 ms][DEBUG] END runCmdUntilRes#1 in 4606 ms [2025-09-08 18:06:10][358080740613492][6557 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:06:12][358080740613492][0 ms][INFO] === Request start === [2025-09-08 18:06:12][358080740613492][1 ms][DEBUG] START check_scloud [2025-09-08 18:06:12][358080740613492][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:06:12][358080740613492][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11889 4972 23878680 89176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:06:12][358080740613492][313 ms][DEBUG] targetPkg: running [2025-09-08 18:06:12][358080740613492][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 18:06:12][358080740613492][313 ms][DEBUG] START check_boot_completed [2025-09-08 18:06:12][358080740613492][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:06:12][358080740613492][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:06:12][358080740613492][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:06:12][358080740613492][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:06:12][358080740613492][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:06:12][358080740613492][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:06:13][358080740613492][532 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30857 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 943\nsuccessfulTxPacketsPerSecond: 2.127814352744335\nretriedTxPackets: 95\nretriedTxPacketsPerSecond: 0.21460008002036882\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 998\nsuccessfulRxPacketsPerSecond: 2.360600880224057\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:06:13][358080740613492][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:06:13][358080740613492][876 ms][DEBUG] SU: done in 343 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.514/231.514/231.514/0.000 ms\n [2025-09-08 18:06:13][358080740613492][876 ms][DEBUG] check_internet: online [2025-09-08 18:06:13][358080740613492][876 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:06:13][358080740613492][876 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080740613492\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3803\"}'\'' -e'"" [2025-09-08 18:06:13][358080740613492][876 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:06:13][358080740613492][876 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080740613492\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3803\"}'\'' -e'"" [2025-09-08 18:06:18][358080740613492][5921 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_948bda6a-7ac9-4667-ae10-948a75c14088","id":"QR_948bda6a-7ac9-4667-ae10-948a75c14088","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:06:18][358080740613492][6077 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-08 18:06:18][358080740613492][6077 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-08 18:06:18][358080740613492][6077 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:09:04][357211249967706][1 ms][INFO] === Request start === [2025-09-08 18:09:04][357211249967706][1 ms][DEBUG] START check_scloud [2025-09-08 18:09:04][357211249967706][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:09:04][357211249967706][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 11889 4972 23982360 106168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:09:04][357211249967706][311 ms][DEBUG] targetPkg: running [2025-09-08 18:09:04][357211249967706][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 18:09:04][357211249967706][311 ms][DEBUG] START check_boot_completed [2025-09-08 18:09:04][357211249967706][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:09:04][357211249967706][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 18:09:04][357211249967706][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:09:04][357211249967706][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:09:04][357211249967706][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 18:09:04][357211249967706][389 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:09:04][357211249967706][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211249967706\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9205\"}'\'' -e'"" [2025-09-08 18:09:04][357211249967706][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:09:04][357211249967706][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211249967706\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9205\"}'\'' -e'"" [2025-09-08 18:09:09][357211249967706][4966 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8454506b-fcb8-4f81-830a-6e21e130063d","id":"QR_8454506b-fcb8-4f81-830a-6e21e130063d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:09:09][357211249967706][5122 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-08 18:09:09][357211249967706][5122 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-08 18:09:09][357211249967706][5122 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:09:11][357211249967706][0 ms][INFO] === Request start === [2025-09-08 18:09:11][357211249967706][1 ms][DEBUG] START check_scloud [2025-09-08 18:09:11][357211249967706][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:09:11][357211249967706][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 11889 4972 24131104 117720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:09:11][357211249967706][314 ms][DEBUG] targetPkg: running [2025-09-08 18:09:11][357211249967706][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 18:09:11][357211249967706][314 ms][DEBUG] START check_boot_completed [2025-09-08 18:09:11][357211249967706][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:09:11][357211249967706][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:09:11][357211249967706][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:09:11][357211249967706][423 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 18:09:11][357211249967706][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:09:11][357211249967706][423 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:09:11][357211249967706][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211249967706\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8825\"}'\'' -e'"" [2025-09-08 18:09:11][357211249967706][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:09:11][357211249967706][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211249967706\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8825\"}'\'' -e'"" [2025-09-08 18:09:16][357211249967706][5047 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da8143d7-8c6f-484c-9987-2aa23baabded","id":"QR_da8143d7-8c6f-484c-9987-2aa23baabded","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:09:16][357211249967706][5203 ms][DEBUG] proc_open done in 4779 ms; code=255; res.len=3343 [2025-09-08 18:09:16][357211249967706][5203 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-08 18:09:16][357211249967706][5203 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:09:20][352397450151174][0 ms][INFO] === Request start === [2025-09-08 18:09:20][352397450151174][1 ms][DEBUG] START check_scloud [2025-09-08 18:09:20][352397450151174][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:09:21][352397450151174][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 11889 4972 24285992 129476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:09:21][352397450151174][312 ms][DEBUG] targetPkg: running [2025-09-08 18:09:21][352397450151174][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 18:09:21][352397450151174][312 ms][DEBUG] START check_boot_completed [2025-09-08 18:09:21][352397450151174][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:09:21][352397450151174][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:09:21][352397450151174][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:09:21][352397450151174][421 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:09:21][352397450151174][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:09:21][352397450151174][421 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:09:21][352397450151174][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450151174\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4180\"}'\'' -e'"" [2025-09-08 18:09:21][352397450151174][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:09:21][352397450151174][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450151174\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4180\"}'\'' -e'"" [2025-09-08 18:09:24][352397450151174][3701 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bad66dd0-5279-4001-9588-156c042b2326","id":"QR_bad66dd0-5279-4001-9588-156c042b2326","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:09:24][352397450151174][3858 ms][DEBUG] proc_open done in 3436 ms; code=255; res.len=3343 [2025-09-08 18:09:24][352397450151174][3858 ms][DEBUG] END runCmdUntilRes#1 in 3436 ms [2025-09-08 18:09:24][352397450151174][3858 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:09:27][352397450151174][0 ms][INFO] === Request start === [2025-09-08 18:09:27][352397450151174][1 ms][DEBUG] START check_scloud [2025-09-08 18:09:27][352397450151174][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:09:27][352397450151174][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 11889 4972 24451084 138304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:09:27][352397450151174][306 ms][DEBUG] targetPkg: running [2025-09-08 18:09:27][352397450151174][306 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 18:09:27][352397450151174][306 ms][DEBUG] START check_boot_completed [2025-09-08 18:09:27][352397450151174][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:09:27][352397450151174][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 18:09:27][352397450151174][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:09:27][352397450151174][400 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 18:09:27][352397450151174][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 18:09:27][352397450151174][401 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:09:27][352397450151174][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450151174\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2425\"}'\'' -e'"" [2025-09-08 18:09:27][352397450151174][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:09:27][352397450151174][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450151174\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2425\"}'\'' -e'"" [2025-09-08 18:09:32][352397450151174][4946 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce3b5fad-dd61-4c9a-a657-169efbecf59b","id":"QR_ce3b5fad-dd61-4c9a-a657-169efbecf59b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:09:32][352397450151174][5102 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-08 18:09:32][352397450151174][5102 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-08 18:09:32][352397450151174][5102 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:11:03][352397455226096][0 ms][INFO] === Request start === [2025-09-08 18:11:03][352397455226096][1 ms][DEBUG] START check_scloud [2025-09-08 18:11:03][352397455226096][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:11:03][352397455226096][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 11889 4972 24562856 150296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:11:03][352397455226096][303 ms][DEBUG] targetPkg: running [2025-09-08 18:11:03][352397455226096][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 18:11:03][352397455226096][303 ms][DEBUG] START check_boot_completed [2025-09-08 18:11:03][352397455226096][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:11:03][352397455226096][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 18:11:03][352397455226096][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:11:03][352397455226096][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:11:03][352397455226096][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 18:11:03][352397455226096][381 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:11:03][352397455226096][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397455226096\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7448\"}'\'' -e'"" [2025-09-08 18:11:03][352397455226096][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:11:03][352397455226096][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397455226096\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7448\"}'\'' -e'"" [2025-09-08 18:11:04][352397455226096][866 ms][DEBUG] proc_open done in 484 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-08 18:11:04][352397455226096][866 ms][DEBUG] END runCmdUntilRes#1 in 484 ms [2025-09-08 18:11:04][352397455226096][866 ms][WARN] Detected system_server; Reboot the device Unable to find process with name 'system_server'Unable to find process with name 'system_server'\r\n [2025-09-08 18:11:04][352397455226096][866 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 18:11:04][352397455226096][1178 ms][DEBUG] SU: done in 313 ms; out [2025-09-08 18:11:04][352397455226096][1179 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-08 18:11:06][352397455226096][2834 ms][DEBUG] SU: done in 1655 ms; out [2025-09-08 18:12:03][352397455226096][1 ms][INFO] === Request start === [2025-09-08 18:12:03][352397455226096][1 ms][DEBUG] START check_scloud [2025-09-08 18:12:03][352397455226096][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:12:03][352397455226096][28 ms][DEBUG] SU: done in 27 ms; out [2025-09-08 18:12:03][352397455226096][28 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:12:04][352397455226096][60 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-08 18:12:04][352397455226096][60 ms][WARN] check_devices: no device [2025-09-08 18:12:04][352397455226096][60 ms][WARN] check_devices: no device [2025-09-08 18:12:04][352397455226096][60 ms][DEBUG] END check_scloud in 59 ms [2025-09-08 18:12:07][350805650563149][0 ms][INFO] === Request start === [2025-09-08 18:12:07][350805650563149][1 ms][DEBUG] START check_scloud [2025-09-08 18:12:07][350805650563149][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:12:07][350805650563149][319 ms][DEBUG] SU: done in 318 ms; out [2025-09-08 18:12:07][350805650563149][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:12:08][350805650563149][350 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 18:12:08][350805650563149][350 ms][DEBUG] check_devices: device found [2025-09-08 18:12:08][350805650563149][350 ms][WARN] targetPkg: not running, restarting [2025-09-08 18:12:08][350805650563149][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:12:08][350805650563149][475 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 18:12:08][350805650563149][475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:12:08][350805650563149][678 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 18:12:10][350805650563149][2689 ms][DEBUG] END check_scloud in 2688 ms [2025-09-08 18:12:10][350805650563149][2689 ms][DEBUG] START check_boot_completed [2025-09-08 18:12:10][350805650563149][2689 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:12:12][350805650563149][4756 ms][DEBUG] ADB: done in 2067 ms; out [2025-09-08 18:12:12][350805650563149][4756 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:12:12][350805650563149][4818 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:12:12][350805650563149][4818 ms][DEBUG] END check_boot_completed in 2129 ms [2025-09-08 18:12:12][350805650563149][4818 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:12:12][350805650563149][4945 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30735 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4\nsuccessfulTxPacketsPerSecond: 1.2180403259236154\nretriedTxPackets: 1\nretriedTxPacketsPerSecond: 0.32643031291678964\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1\nsuccessfulRxPacketsPerSecond: 0.32643031291678964\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 0, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:12:12][350805650563149][4945 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:12:16][350805650563149][9083 ms][DEBUG] SU: done in 4138 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.321/156.321/156.321/0.000 ms\n [2025-09-08 18:12:16][350805650563149][9083 ms][DEBUG] check_internet: online [2025-09-08 18:12:16][350805650563149][9083 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:12:16][350805650563149][9083 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650563149\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1392\"}'\'' -e'"" [2025-09-08 18:12:16][350805650563149][9083 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:12:16][350805650563149][9083 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650563149\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1392\"}'\'' -e'"" [2025-09-08 18:12:22][350805650563149][15097 ms][DEBUG] proc_open done in 6014 ms (timeout); code=4; out.len=0 err.len=19 [2025-09-08 18:12:22][350805650563149][15098 ms][DEBUG] END runCmdUntilRes#1 in 6015 ms [2025-09-08 18:12:22][350805650563149][15098 ms][WARN] Detected error: Process not foundProcess not found\r\n [2025-09-08 18:12:22][350805650563149][15098 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 18:12:23][350805650563149][15409 ms][DEBUG] SU: done in 312 ms; outsystem 5397 4974 12421212 585808 ep_poll 0 S system_server\nsystem 9008 1 12335184 116240 ptrace_stop 0 t system_server\n [2025-09-08 18:12:23][350805650563149][15410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 18:12:23][350805650563149][15551 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 18:12:23][350805650563149][15551 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 18:12:23][350805650563149][15551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:12:23][350805650563149][15706 ms][DEBUG] SU: done in 155 ms; out [2025-09-08 18:12:23][350805650563149][15706 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:12:23][350805650563149][15987 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 18:12:25][350805650563149][18002 ms][DEBUG] START check_boot_completed [2025-09-08 18:12:25][350805650563149][18002 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:12:25][350805650563149][18034 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 18:12:25][350805650563149][18034 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:12:25][350805650563149][18080 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:12:25][350805650563149][18080 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 18:12:28][350805650563149][21095 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 18:12:28][350805650563149][21096 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650563149\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1392\"}'\'' -e'"" [2025-09-08 18:12:29][350805650563149][22205 ms][DEBUG] proc_open done in 1109 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-08 18:12:29][350805650563149][22205 ms][DEBUG] END runCmdUntilRes#2 in 1109 ms [2025-09-08 18:12:29][350805650563149][22205 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-08 18:12:29][350805650563149][22205 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 18:12:30][350805650563149][22658 ms][DEBUG] SU: done in 453 ms; out [2025-09-08 18:13:03][352397455226096][0 ms][INFO] === Request start === [2025-09-08 18:13:03][352397455226096][1 ms][DEBUG] START check_scloud [2025-09-08 18:13:03][352397455226096][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:13:03][352397455226096][418 ms][DEBUG] SU: done in 417 ms; out [2025-09-08 18:13:03][352397455226096][418 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:13:03][352397455226096][465 ms][DEBUG] ADB: done in 46 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 18:13:03][352397455226096][465 ms][DEBUG] check_devices: device found [2025-09-08 18:13:03][352397455226096][465 ms][WARN] targetPkg: not running, restarting [2025-09-08 18:13:03][352397455226096][465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:13:03][352397455226096][730 ms][DEBUG] SU: done in 265 ms; out [2025-09-08 18:13:03][352397455226096][731 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:13:04][352397455226096][1107 ms][DEBUG] SU: done in 377 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 18:13:06][352397455226096][3120 ms][DEBUG] END check_scloud in 3120 ms [2025-09-08 18:13:06][352397455226096][3120 ms][DEBUG] START check_boot_completed [2025-09-08 18:13:06][352397455226096][3120 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:13:06][352397455226096][3167 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:13:06][352397455226096][3167 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:13:06][352397455226096][3339 ms][DEBUG] SU: done in 172 ms; out [2025-09-08 18:13:06][352397455226096][3339 ms][DEBUG] END check_boot_completed in 219 ms [2025-09-08 18:13:06][352397455226096][3339 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:13:06][352397455226096][3339 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397455226096\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6541\"}'\'' -e'"" [2025-09-08 18:13:06][352397455226096][3339 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:13:06][352397455226096][3339 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397455226096\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6541\"}'\'' -e'"" [2025-09-08 18:13:13][352397455226096][10712 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c6cd17da-1cd7-4dba-ae9b-61690c9c411b","id":"QR_c6cd17da-1cd7-4dba-ae9b-61690c9c411b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:13:14][352397455226096][10868 ms][DEBUG] proc_open done in 7529 ms; code=255; res.len=3343 [2025-09-08 18:13:14][352397455226096][10869 ms][DEBUG] END runCmdUntilRes#1 in 7529 ms [2025-09-08 18:13:14][352397455226096][10869 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:13:16][350805650563149][0 ms][INFO] === Request start === [2025-09-08 18:13:16][350805650563149][1 ms][DEBUG] START check_scloud [2025-09-08 18:13:16][350805650563149][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:13:16][350805650563149][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 12003 9290 23683740 117332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:13:16][350805650563149][321 ms][DEBUG] targetPkg: running [2025-09-08 18:13:16][350805650563149][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-08 18:13:16][350805650563149][321 ms][DEBUG] START check_boot_completed [2025-09-08 18:13:16][350805650563149][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:13:16][350805650563149][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:13:16][350805650563149][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:13:16][350805650563149][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:13:16][350805650563149][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 18:13:16][350805650563149][415 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:13:16][350805650563149][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650563149\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4009\"}'\'' -e'"" [2025-09-08 18:13:16][350805650563149][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:13:16][350805650563149][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650563149\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4009\"}'\'' -e'"" [2025-09-08 18:14:03][350805650563149][1 ms][INFO] === Request start === [2025-09-08 18:14:03][350805650563149][1 ms][DEBUG] START check_scloud [2025-09-08 18:14:03][350805650563149][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:14:04][350805650563149][459 ms][DEBUG] SU: done in 458 ms; out [2025-09-08 18:14:04][350805650563149][459 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:14:04][350805650563149][506 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 18:14:04][350805650563149][506 ms][DEBUG] check_devices: device found [2025-09-08 18:14:04][350805650563149][506 ms][WARN] targetPkg: not running, restarting [2025-09-08 18:14:04][350805650563149][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:14:04][350805650563149][646 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 18:14:04][350805650563149][646 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:14:04][350805650563149][881 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 18:14:06][350805650563149][2896 ms][DEBUG] END check_scloud in 2895 ms [2025-09-08 18:14:06][350805650563149][2896 ms][DEBUG] START check_boot_completed [2025-09-08 18:14:06][350805650563149][2896 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:14:06][350805650563149][2943 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:14:06][350805650563149][2943 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:14:06][350805650563149][3005 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:14:06][350805650563149][3005 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:14:06][350805650563149][3005 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:14:06][350805650563149][3240 ms][DEBUG] SU: done in 234 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=129595 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 117\nsuccessfulTxPacketsPerSecond: 9.859438935610736\nretriedTxPackets: 11\nretriedTxPacketsPerSecond: 1.9121346684556462\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 107\nsuccessfulRxPacketsPerSecond: 9.56187794943086\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:14:06][350805650563149][3240 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:14:07][350805650563149][3943 ms][DEBUG] SU: done in 703 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=157 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 157.443/157.443/157.443/0.000 ms\n [2025-09-08 18:14:07][350805650563149][3943 ms][DEBUG] check_internet: online [2025-09-08 18:14:07][350805650563149][3943 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:14:07][350805650563149][3943 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650563149\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1373\"}'\'' -e'"" [2025-09-08 18:14:07][350805650563149][3943 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:14:07][350805650563149][3943 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650563149\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1373\"}'\'' -e'"" [2025-09-08 18:14:13][350805650563149][9457 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3527c7b6-24a2-419d-8d7d-1232f1ff085e","id":"QR_3527c7b6-24a2-419d-8d7d-1232f1ff085e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:14:13][350805650563149][9613 ms][DEBUG] proc_open done in 5670 ms; code=255; res.len=3343 [2025-09-08 18:14:13][350805650563149][9613 ms][DEBUG] END runCmdUntilRes#1 in 5670 ms [2025-09-08 18:14:13][350805650563149][9613 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:14:16][350456244463253][0 ms][INFO] === Request start === [2025-09-08 18:14:16][350456244463253][1 ms][DEBUG] START check_scloud [2025-09-08 18:14:16][350456244463253][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:14:16][350456244463253][391 ms][DEBUG] SU: done in 390 ms; outu0_a118 17510 13769 23638648 106232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:14:16][350456244463253][391 ms][DEBUG] targetPkg: running [2025-09-08 18:14:16][350456244463253][391 ms][DEBUG] END check_scloud in 391 ms [2025-09-08 18:14:16][350456244463253][391 ms][DEBUG] START check_boot_completed [2025-09-08 18:14:16][350456244463253][391 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:14:16][350456244463253][438 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:14:16][350456244463253][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:14:17][350456244463253][485 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:14:17][350456244463253][485 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:14:17][350456244463253][485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:14:17][350456244463253][610 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=129595 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 243\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 27\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 227\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:14:17][350456244463253][610 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:14:17][350456244463253][891 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=162 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 162.587/162.587/162.587/0.000 ms\n [2025-09-08 18:14:17][350456244463253][891 ms][DEBUG] check_internet: online [2025-09-08 18:14:17][350456244463253][891 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:14:17][350456244463253][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456244463253\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5906\"}'\'' -e'"" [2025-09-08 18:14:17][350456244463253][891 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:14:17][350456244463253][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456244463253\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5906\"}'\'' -e'"" [2025-09-08 18:14:22][350456244463253][6468 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46163e1b-0b13-4eff-914e-4233b8e66421","id":"QR_46163e1b-0b13-4eff-914e-4233b8e66421","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:14:23][350456244463253][6624 ms][DEBUG] proc_open done in 5733 ms; code=255; res.len=3343 [2025-09-08 18:14:23][350456244463253][6624 ms][DEBUG] END runCmdUntilRes#1 in 5733 ms [2025-09-08 18:14:23][350456244463253][6624 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:14:27][350536255247107][0 ms][INFO] === Request start === [2025-09-08 18:14:27][350536255247107][1 ms][DEBUG] START check_scloud [2025-09-08 18:14:27][350536255247107][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:14:28][350536255247107][353 ms][DEBUG] SU: done in 352 ms; outu0_a118 17510 13769 23786444 91212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:14:28][350536255247107][353 ms][DEBUG] targetPkg: running [2025-09-08 18:14:28][350536255247107][353 ms][DEBUG] END check_scloud in 352 ms [2025-09-08 18:14:28][350536255247107][353 ms][DEBUG] START check_boot_completed [2025-09-08 18:14:28][350536255247107][353 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:14:28][350536255247107][384 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 18:14:28][350536255247107][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:14:28][350536255247107][478 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 18:14:28][350536255247107][478 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 18:14:28][350536255247107][478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:14:28][350536255247107][649 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=129595 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 243\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 27\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 227\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:14:28][350536255247107][650 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:14:28][350536255247107][946 ms][DEBUG] SU: done in 296 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.958/156.958/156.958/0.000 ms\n [2025-09-08 18:14:28][350536255247107][946 ms][DEBUG] check_internet: online [2025-09-08 18:14:28][350536255247107][946 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:14:28][350536255247107][946 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536255247107\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6308\"}'\'' -e'"" [2025-09-08 18:14:28][350536255247107][946 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:14:28][350536255247107][946 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536255247107\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6308\"}'\'' -e'"" [2025-09-08 18:14:32][350536255247107][5101 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b381f7e7-fd32-42f0-9c09-f15eee0ef166","id":"QR_b381f7e7-fd32-42f0-9c09-f15eee0ef166","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:14:32][350536255247107][5257 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-09-08 18:14:32][350536255247107][5257 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-09-08 18:14:32][350536255247107][5258 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:14:36][350915063158203][0 ms][INFO] === Request start === [2025-09-08 18:14:36][350915063158203][1 ms][DEBUG] START check_scloud [2025-09-08 18:14:36][350915063158203][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:14:36][350915063158203][448 ms][DEBUG] SU: done in 447 ms; outu0_a118 17510 13769 23828288 82420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:14:36][350915063158203][448 ms][DEBUG] targetPkg: running [2025-09-08 18:14:36][350915063158203][448 ms][DEBUG] END check_scloud in 448 ms [2025-09-08 18:14:36][350915063158203][448 ms][DEBUG] START check_boot_completed [2025-09-08 18:14:36][350915063158203][448 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:14:36][350915063158203][494 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:14:36][350915063158203][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:14:36][350915063158203][588 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 18:14:36][350915063158203][588 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 18:14:36][350915063158203][588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:14:37][350915063158203][791 ms][DEBUG] SU: done in 203 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=129595 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 553\nsuccessfulTxPacketsPerSecond: 15.353898664078669\nretriedTxPackets: 59\nretriedTxPacketsPerSecond: 1.5849185717758623\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 565\nsuccessfulRxPacketsPerSecond: 16.740702414382547\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:14:37][350915063158203][792 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:14:37][350915063158203][1088 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=162 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 162.997/162.997/162.997/0.000 ms\n [2025-09-08 18:14:37][350915063158203][1088 ms][DEBUG] check_internet: online [2025-09-08 18:14:37][350915063158203][1088 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:14:37][350915063158203][1089 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915063158203\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7808\"}'\'' -e'"" [2025-09-08 18:14:37][350915063158203][1089 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:14:37][350915063158203][1089 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915063158203\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7808\"}'\'' -e'"" [2025-09-08 18:14:43][350915063158203][6821 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98dd7b6c-d9d0-4c9c-abb5-ace1f96bbd92","id":"QR_98dd7b6c-d9d0-4c9c-abb5-ace1f96bbd92","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:14:43][350915063158203][6977 ms][DEBUG] proc_open done in 5888 ms; code=255; res.len=3343 [2025-09-08 18:14:43][350915063158203][6977 ms][DEBUG] END runCmdUntilRes#1 in 5888 ms [2025-09-08 18:14:43][350915063158203][6978 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:15:04][352600229411526][1 ms][INFO] === Request start === [2025-09-08 18:15:04][352600229411526][1 ms][DEBUG] START check_scloud [2025-09-08 18:15:04][352600229411526][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:15:04][352600229411526][248 ms][DEBUG] SU: done in 247 ms; out [2025-09-08 18:15:04][352600229411526][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:15:04][352600229411526][295 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 18:15:04][352600229411526][295 ms][DEBUG] check_devices: device found [2025-09-08 18:15:04][352600229411526][295 ms][WARN] targetPkg: not running, restarting [2025-09-08 18:15:04][352600229411526][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:15:04][352600229411526][420 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 18:15:04][352600229411526][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:15:04][352600229411526][639 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 18:15:06][352600229411526][2654 ms][DEBUG] END check_scloud in 2653 ms [2025-09-08 18:15:06][352600229411526][2654 ms][DEBUG] START check_boot_completed [2025-09-08 18:15:06][352600229411526][2654 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:15:06][352600229411526][2701 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:15:06][352600229411526][2701 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:15:06][352600229411526][2747 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:15:06][352600229411526][2747 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 18:15:06][352600229411526][2747 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:15:06][352600229411526][2747 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229411526\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1442\"}'\'' -e'"" [2025-09-08 18:15:06][352600229411526][2747 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:15:06][352600229411526][2747 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229411526\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1442\"}'\'' -e'"" [2025-09-08 18:15:08][352600229411526][4622 ms][DEBUG] proc_open done in 1875 ms (timeout); code=4; out.len=0 err.len=19 [2025-09-08 18:15:08][352600229411526][4622 ms][DEBUG] END runCmdUntilRes#1 in 1875 ms [2025-09-08 18:15:08][352600229411526][4622 ms][WARN] Detected error: Process not foundProcess not found\r\n [2025-09-08 18:15:08][352600229411526][4622 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 18:15:09][352600229411526][4888 ms][DEBUG] SU: done in 265 ms; outsystem 22522 22325 10196672 231516 futex_wait_queue_me 0 S system_server\n [2025-09-08 18:15:09][352600229411526][4888 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 18:15:09][352600229411526][5028 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 18:15:09][352600229411526][5028 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 18:15:09][352600229411526][5028 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:15:09][352600229411526][5169 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 18:15:09][352600229411526][5169 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:15:09][352600229411526][5309 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 18:15:11][352600229411526][7324 ms][DEBUG] START check_boot_completed [2025-09-08 18:15:11][352600229411526][7324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:15:11][352600229411526][7371 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:15:11][352600229411526][7371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:15:11][352600229411526][7481 ms][DEBUG] SU: done in 109 ms; out [2025-09-08 18:15:11][352600229411526][7481 ms][DEBUG] END check_boot_completed in 156 ms [2025-09-08 18:15:14][352600229411526][10495 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 18:15:14][352600229411526][10496 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229411526\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1442\"}'\'' -e'"" [2025-09-08 18:15:43][352600229411526][39145 ms][DEBUG] proc_open done in 28649 ms (timeout); code=4; out.len=0 err.len=21 [2025-09-08 18:15:43][352600229411526][39145 ms][DEBUG] END runCmdUntilRes#2 in 28650 ms [2025-09-08 18:15:43][352600229411526][39145 ms][ERROR] NO RESULT; code=124 outTimeout was reached errTimeout was reached\r\n [2025-09-08 18:15:43][352600229411526][39145 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 18:15:43][352600229411526][39489 ms][DEBUG] SU: done in 344 ms; outsystem 22522 22325 11743096 504176 futex_wait_queue_me 0 S system_server\n [2025-09-08 18:16:03][352600229411526][0 ms][INFO] === Request start === [2025-09-08 18:16:03][352600229411526][1 ms][DEBUG] START check_scloud [2025-09-08 18:16:03][352600229411526][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:16:03][352600229411526][258 ms][DEBUG] SU: done in 257 ms; out [2025-09-08 18:16:03][352600229411526][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:16:03][352600229411526][304 ms][DEBUG] ADB: done in 46 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 18:16:03][352600229411526][304 ms][DEBUG] check_devices: device found [2025-09-08 18:16:03][352600229411526][304 ms][WARN] targetPkg: not running, restarting [2025-09-08 18:16:03][352600229411526][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:16:04][352600229411526][445 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 18:16:04][352600229411526][445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:16:04][352600229411526][585 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 18:16:06][352600229411526][2600 ms][DEBUG] END check_scloud in 2599 ms [2025-09-08 18:16:06][352600229411526][2600 ms][DEBUG] START check_boot_completed [2025-09-08 18:16:06][352600229411526][2600 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:16:06][352600229411526][2647 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:16:06][352600229411526][2647 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:16:06][352600229411526][2710 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:16:06][352600229411526][2710 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:16:06][352600229411526][2710 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:16:06][352600229411526][2835 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 18:16:14][358543582337330][0 ms][INFO] === Request start === [2025-09-08 18:16:14][358543582337330][1 ms][DEBUG] START check_scloud [2025-09-08 18:16:14][358543582337330][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:16:14][358543582337330][236 ms][DEBUG] SU: done in 236 ms; out [2025-09-08 18:16:14][358543582337330][237 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:16:14][358543582337330][268 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 18:16:14][358543582337330][268 ms][DEBUG] check_devices: device found [2025-09-08 18:16:14][358543582337330][268 ms][WARN] targetPkg: not running, restarting [2025-09-08 18:16:14][358543582337330][268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:16:14][358543582337330][377 ms][DEBUG] SU: done in 110 ms; out [2025-09-08 18:16:14][358543582337330][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:16:14][358543582337330][504 ms][DEBUG] SU: done in 127 ms; out [2025-09-08 18:16:16][358543582337330][2517 ms][DEBUG] END check_scloud in 2516 ms [2025-09-08 18:16:16][358543582337330][2517 ms][DEBUG] START check_boot_completed [2025-09-08 18:16:16][358543582337330][2517 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:16:16][358543582337330][2564 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:16:16][358543582337330][2564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:16:16][358543582337330][2627 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:16:16][358543582337330][2627 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:16:16][358543582337330][2627 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:16:16][358543582337330][2736 ms][DEBUG] SU: done in 109 ms; out [2025-09-08 18:16:21][358140830641074][0 ms][INFO] === Request start === [2025-09-08 18:16:21][358140830641074][1 ms][DEBUG] START check_scloud [2025-09-08 18:16:21][358140830641074][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:16:21][358140830641074][232 ms][DEBUG] SU: done in 231 ms; out [2025-09-08 18:16:21][358140830641074][232 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:16:21][358140830641074][294 ms][DEBUG] ADB: done in 62 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 18:16:21][358140830641074][294 ms][DEBUG] check_devices: device found [2025-09-08 18:16:21][358140830641074][294 ms][WARN] targetPkg: not running, restarting [2025-09-08 18:16:21][358140830641074][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:16:21][358140830641074][404 ms][DEBUG] SU: done in 109 ms; out [2025-09-08 18:16:21][358140830641074][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:16:22][358140830641074][529 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 18:16:24][358140830641074][2544 ms][DEBUG] END check_scloud in 2543 ms [2025-09-08 18:16:24][358140830641074][2544 ms][DEBUG] START check_boot_completed [2025-09-08 18:16:24][358140830641074][2544 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:16:24][358140830641074][2591 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:16:24][358140830641074][2591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:16:24][358140830641074][2653 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:16:24][358140830641074][2653 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 18:16:24][358140830641074][2654 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:16:24][358140830641074][2794 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 18:17:03][352600229411526][0 ms][INFO] === Request start === [2025-09-08 18:17:03][352600229411526][1 ms][DEBUG] START check_scloud [2025-09-08 18:17:03][352600229411526][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:17:03][352600229411526][41 ms][DEBUG] SU: done in 41 ms; out [2025-09-08 18:17:03][352600229411526][41 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:17:03][352600229411526][73 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-08 18:17:03][352600229411526][73 ms][WARN] check_devices: no device [2025-09-08 18:17:03][352600229411526][73 ms][WARN] check_devices: no device [2025-09-08 18:17:03][352600229411526][73 ms][DEBUG] END check_scloud in 72 ms [2025-09-08 18:17:10][358543582337330][1 ms][INFO] === Request start === [2025-09-08 18:17:10][358543582337330][1 ms][DEBUG] START check_scloud [2025-09-08 18:17:10][358543582337330][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:17:11][358543582337330][32 ms][DEBUG] SU: done in 30 ms; out [2025-09-08 18:17:11][358543582337330][32 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:17:11][358543582337330][63 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-08 18:17:11][358543582337330][63 ms][WARN] check_devices: no device [2025-09-08 18:17:11][358543582337330][63 ms][WARN] check_devices: no device [2025-09-08 18:17:11][358543582337330][63 ms][DEBUG] END check_scloud in 62 ms [2025-09-08 18:17:15][358140830641074][0 ms][INFO] === Request start === [2025-09-08 18:17:15][358140830641074][1 ms][DEBUG] START check_scloud [2025-09-08 18:17:15][358140830641074][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:17:15][358140830641074][39 ms][DEBUG] SU: done in 39 ms; out [2025-09-08 18:17:15][358140830641074][39 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:17:15][358140830641074][71 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-08 18:17:15][358140830641074][71 ms][WARN] check_devices: no device [2025-09-08 18:17:15][358140830641074][71 ms][WARN] check_devices: no device [2025-09-08 18:17:15][358140830641074][71 ms][DEBUG] END check_scloud in 70 ms [2025-09-08 18:17:19][356414815609543][0 ms][INFO] === Request start === [2025-09-08 18:17:19][356414815609543][1 ms][DEBUG] START check_scloud [2025-09-08 18:17:19][356414815609543][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:17:19][356414815609543][47 ms][DEBUG] SU: done in 46 ms; out [2025-09-08 18:17:19][356414815609543][47 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:17:19][356414815609543][78 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-08 18:17:19][356414815609543][78 ms][WARN] check_devices: no device [2025-09-08 18:17:19][356414815609543][78 ms][WARN] check_devices: no device [2025-09-08 18:17:19][356414815609543][78 ms][DEBUG] END check_scloud in 77 ms [2025-09-08 18:17:23][358697430680448][1 ms][INFO] === Request start === [2025-09-08 18:17:23][358697430680448][1 ms][DEBUG] START check_scloud [2025-09-08 18:17:23][358697430680448][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:17:23][358697430680448][39 ms][DEBUG] SU: done in 38 ms; out [2025-09-08 18:17:23][358697430680448][39 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:17:23][358697430680448][101 ms][DEBUG] ADB: done in 62 ms; outList of devices attached\n\n [2025-09-08 18:17:23][358697430680448][101 ms][WARN] check_devices: no device [2025-09-08 18:17:23][358697430680448][101 ms][WARN] check_devices: no device [2025-09-08 18:17:23][358697430680448][101 ms][DEBUG] END check_scloud in 100 ms [2025-09-08 18:18:03][352600229411526][0 ms][INFO] === Request start === [2025-09-08 18:18:03][352600229411526][1 ms][DEBUG] START check_scloud [2025-09-08 18:18:03][352600229411526][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:18:04][352600229411526][338 ms][DEBUG] SU: done in 337 ms; out [2025-09-08 18:18:04][352600229411526][338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:18:04][352600229411526][384 ms][DEBUG] ADB: done in 46 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 18:18:04][352600229411526][384 ms][DEBUG] check_devices: device found [2025-09-08 18:18:04][352600229411526][385 ms][WARN] targetPkg: not running, restarting [2025-09-08 18:18:04][352600229411526][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:18:04][352600229411526][525 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 18:18:04][352600229411526][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:18:04][352600229411526][869 ms][DEBUG] SU: done in 344 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 18:18:06][352600229411526][2884 ms][DEBUG] END check_scloud in 2883 ms [2025-09-08 18:18:06][352600229411526][2884 ms][DEBUG] START check_boot_completed [2025-09-08 18:18:06][352600229411526][2884 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:18:06][352600229411526][2931 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:18:06][352600229411526][2931 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:18:06][352600229411526][3009 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 18:18:06][352600229411526][3009 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 18:18:06][352600229411526][3009 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:18:07][352600229411526][3213 ms][DEBUG] SU: done in 204 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30502 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 187\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 14\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 171\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:18:07][352600229411526][3213 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:18:07][352600229411526][3571 ms][DEBUG] SU: done in 358 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.681/156.681/156.681/0.000 ms\n [2025-09-08 18:18:07][352600229411526][3571 ms][DEBUG] check_internet: online [2025-09-08 18:18:07][352600229411526][3571 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:18:07][352600229411526][3571 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229411526\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9976\"}'\'' -e'"" [2025-09-08 18:18:07][352600229411526][3571 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:18:07][352600229411526][3571 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229411526\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9976\"}'\'' -e'"" [2025-09-08 18:18:14][352600229411526][10038 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_079f779d-5cd6-4d6c-96e0-e39d188627a4","id":"QR_079f779d-5cd6-4d6c-96e0-e39d188627a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:18:14][352600229411526][10195 ms][DEBUG] proc_open done in 6623 ms; code=255; res.len=3343 [2025-09-08 18:18:14][352600229411526][10195 ms][DEBUG] END runCmdUntilRes#1 in 6623 ms [2025-09-08 18:18:14][352600229411526][10195 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:18:20][358543582337330][0 ms][INFO] === Request start === [2025-09-08 18:18:20][358543582337330][1 ms][DEBUG] START check_scloud [2025-09-08 18:18:20][358543582337330][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:18:21][358543582337330][367 ms][DEBUG] SU: done in 366 ms; outu0_a118 10078 4967 23754532 107468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:18:21][358543582337330][367 ms][DEBUG] targetPkg: running [2025-09-08 18:18:21][358543582337330][367 ms][DEBUG] END check_scloud in 366 ms [2025-09-08 18:18:21][358543582337330][367 ms][DEBUG] START check_boot_completed [2025-09-08 18:18:21][358543582337330][367 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:18:21][358543582337330][413 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:18:21][358543582337330][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:18:21][358543582337330][460 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:18:21][358543582337330][460 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:18:21][358543582337330][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:18:21][358543582337330][585 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30502 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 187\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 14\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 171\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:18:21][358543582337330][585 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:18:21][358543582337330][977 ms][DEBUG] SU: done in 391 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.840/267.840/267.840/0.000 ms\n [2025-09-08 18:18:21][358543582337330][977 ms][DEBUG] check_internet: online [2025-09-08 18:18:21][358543582337330][977 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:18:21][358543582337330][977 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543582337330\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6329\"}'\'' -e'"" [2025-09-08 18:18:21][358543582337330][977 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:18:21][358543582337330][977 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543582337330\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6329\"}'\'' -e'"" [2025-09-08 18:18:26][358543582337330][5506 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2eceb12c-e625-490e-bab8-8ea4cc26d340","id":"QR_2eceb12c-e625-490e-bab8-8ea4cc26d340","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:18:26][358543582337330][5662 ms][DEBUG] proc_open done in 4685 ms; code=255; res.len=3343 [2025-09-08 18:18:26][358543582337330][5662 ms][DEBUG] END runCmdUntilRes#1 in 4685 ms [2025-09-08 18:18:26][358543582337330][5662 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:18:29][358140830641074][0 ms][INFO] === Request start === [2025-09-08 18:18:29][358140830641074][1 ms][DEBUG] START check_scloud [2025-09-08 18:18:29][358140830641074][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:18:30][358140830641074][357 ms][DEBUG] SU: done in 356 ms; outu0_a118 10078 4967 23885780 93228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:18:30][358140830641074][357 ms][DEBUG] targetPkg: running [2025-09-08 18:18:30][358140830641074][357 ms][DEBUG] END check_scloud in 356 ms [2025-09-08 18:18:30][358140830641074][357 ms][DEBUG] START check_boot_completed [2025-09-08 18:18:30][358140830641074][357 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:18:30][358140830641074][388 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 18:18:30][358140830641074][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:18:30][358140830641074][451 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 18:18:30][358140830641074][451 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 18:18:30][358140830641074][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:18:30][358140830641074][607 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30502 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 187\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 14\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 171\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:18:30][358140830641074][607 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:18:30][358140830641074][950 ms][DEBUG] SU: done in 343 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=157 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 157.345/157.345/157.345/0.000 ms\n [2025-09-08 18:18:30][358140830641074][950 ms][DEBUG] check_internet: online [2025-09-08 18:18:30][358140830641074][950 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:18:30][358140830641074][950 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358140830641074\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7138\"}'\'' -e'"" [2025-09-08 18:18:30][358140830641074][950 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:18:30][358140830641074][950 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358140830641074\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7138\"}'\'' -e'"" [2025-09-08 18:18:35][358140830641074][6308 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39d2a59a-280c-4981-9b6d-32cba9620fc8","id":"QR_39d2a59a-280c-4981-9b6d-32cba9620fc8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:18:36][358140830641074][6465 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-08 18:18:36][358140830641074][6465 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-08 18:18:36][358140830641074][6465 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:19:03][356414815609543][0 ms][INFO] === Request start === [2025-09-08 18:19:03][356414815609543][1 ms][DEBUG] START check_scloud [2025-09-08 18:19:03][356414815609543][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:19:04][356414815609543][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 10078 4967 23917220 66728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:19:04][356414815609543][313 ms][DEBUG] targetPkg: running [2025-09-08 18:19:04][356414815609543][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 18:19:04][356414815609543][313 ms][DEBUG] START check_boot_completed [2025-09-08 18:19:04][356414815609543][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:19:04][356414815609543][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:19:04][356414815609543][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:19:04][356414815609543][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:19:04][356414815609543][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:19:04][356414815609543][422 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:19:04][356414815609543][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815609543\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5816\"}'\'' -e'"" [2025-09-08 18:19:04][356414815609543][422 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:19:04][356414815609543][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815609543\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5816\"}'\'' -e'"" [2025-09-08 18:19:08][356414815609543][4827 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a72297a-86ae-4524-a1ef-6d017fd9baac","id":"QR_7a72297a-86ae-4524-a1ef-6d017fd9baac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:19:08][356414815609543][4983 ms][DEBUG] proc_open done in 4560 ms; code=255; res.len=3343 [2025-09-08 18:19:08][356414815609543][4983 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-08 18:19:08][356414815609543][4983 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:19:10][358697430680448][0 ms][INFO] === Request start === [2025-09-08 18:19:10][358697430680448][1 ms][DEBUG] START check_scloud [2025-09-08 18:19:10][358697430680448][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:19:11][358697430680448][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 10078 4967 24040160 88440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:19:11][358697430680448][299 ms][DEBUG] targetPkg: running [2025-09-08 18:19:11][358697430680448][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 18:19:11][358697430680448][299 ms][DEBUG] START check_boot_completed [2025-09-08 18:19:11][358697430680448][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:19:11][358697430680448][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:19:11][358697430680448][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:19:11][358697430680448][408 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:19:11][358697430680448][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:19:11][358697430680448][408 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:19:11][358697430680448][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697430680448\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6086\"}'\'' -e'"" [2025-09-08 18:19:11][358697430680448][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:19:11][358697430680448][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697430680448\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6086\"}'\'' -e'"" [2025-09-08 18:19:15][358697430680448][4829 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74e8f216-eb19-43b7-aeeb-321c27cc8e53","id":"QR_74e8f216-eb19-43b7-aeeb-321c27cc8e53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:19:15][358697430680448][4985 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-09-08 18:19:15][358697430680448][4985 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-09-08 18:19:15][358697430680448][4985 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:19:17][358799690835900][1 ms][INFO] === Request start === [2025-09-08 18:19:17][358799690835900][1 ms][DEBUG] START check_scloud [2025-09-08 18:19:17][358799690835900][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:19:18][358799690835900][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 10078 4967 24189792 100648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:19:18][358799690835900][279 ms][DEBUG] targetPkg: running [2025-09-08 18:19:18][358799690835900][279 ms][DEBUG] END check_scloud in 278 ms [2025-09-08 18:19:18][358799690835900][279 ms][DEBUG] START check_boot_completed [2025-09-08 18:19:18][358799690835900][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:19:18][358799690835900][326 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:19:18][358799690835900][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:19:18][358799690835900][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:19:18][358799690835900][373 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 18:19:18][358799690835900][373 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:19:18][358799690835900][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799690835900\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3504\"}'\'' -e'"" [2025-09-08 18:19:18][358799690835900][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:19:18][358799690835900][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799690835900\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3504\"}'\'' -e'"" [2025-09-08 18:19:21][358799690835900][3794 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_00e04316-15e2-4b92-9fce-6454d95812ba","id":"QR_00e04316-15e2-4b92-9fce-6454d95812ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:19:21][358799690835900][3950 ms][DEBUG] proc_open done in 3576 ms; code=255; res.len=3343 [2025-09-08 18:19:21][358799690835900][3950 ms][DEBUG] END runCmdUntilRes#1 in 3576 ms [2025-09-08 18:19:21][358799690835900][3950 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:19:25][359276662055907][0 ms][INFO] === Request start === [2025-09-08 18:19:25][359276662055907][1 ms][DEBUG] START check_scloud [2025-09-08 18:19:25][359276662055907][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:19:25][359276662055907][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 10078 4967 24295492 102304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:19:25][359276662055907][285 ms][DEBUG] targetPkg: running [2025-09-08 18:19:25][359276662055907][285 ms][DEBUG] END check_scloud in 285 ms [2025-09-08 18:19:25][359276662055907][285 ms][DEBUG] START check_boot_completed [2025-09-08 18:19:25][359276662055907][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:19:25][359276662055907][332 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:19:25][359276662055907][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:19:25][359276662055907][394 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:19:25][359276662055907][394 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:19:25][359276662055907][394 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:19:25][359276662055907][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359276662055907\",\"model\":\"SM-P610\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52R20EK23P\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9384\"}'\'' -e'"" [2025-09-08 18:19:25][359276662055907][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:19:25][359276662055907][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359276662055907\",\"model\":\"SM-P610\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52R20EK23P\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9384\"}'\'' -e'"" [2025-09-08 18:19:29][359276662055907][3878 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9afe66a-8e57-4739-b9e8-70ea772ab4f3","id":"QR_d9afe66a-8e57-4739-b9e8-70ea772ab4f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:19:29][359276662055907][4034 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=3343 [2025-09-08 18:19:29][359276662055907][4034 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-09-08 18:19:29][359276662055907][4034 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:21:04][357040732835785][0 ms][INFO] === Request start === [2025-09-08 18:21:04][357040732835785][1 ms][DEBUG] START check_scloud [2025-09-08 18:21:04][357040732835785][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:21:04][357040732835785][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 10078 4967 24376544 112728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:21:04][357040732835785][329 ms][DEBUG] targetPkg: running [2025-09-08 18:21:04][357040732835785][329 ms][DEBUG] END check_scloud in 329 ms [2025-09-08 18:21:04][357040732835785][330 ms][DEBUG] START check_boot_completed [2025-09-08 18:21:04][357040732835785][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:21:04][357040732835785][376 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:21:04][357040732835785][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:21:04][357040732835785][423 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:21:04][357040732835785][423 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:21:04][357040732835785][423 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:21:04][357040732835785][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040732835785\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3099\"}'\'' -e'"" [2025-09-08 18:21:04][357040732835785][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:21:04][357040732835785][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040732835785\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3099\"}'\'' -e'"" [2025-09-08 18:21:09][357040732835785][5187 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b62cb3a1-6bab-4ed9-876c-b5f331bea505","id":"QR_b62cb3a1-6bab-4ed9-876c-b5f331bea505","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:21:09][357040732835785][5343 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-09-08 18:21:09][357040732835785][5343 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-08 18:21:09][357040732835785][5344 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:21:11][357040732835785][0 ms][INFO] === Request start === [2025-09-08 18:21:11][357040732835785][1 ms][DEBUG] START check_scloud [2025-09-08 18:21:11][357040732835785][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:21:12][357040732835785][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 10078 4967 24529256 123012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:21:12][357040732835785][333 ms][DEBUG] targetPkg: running [2025-09-08 18:21:12][357040732835785][333 ms][DEBUG] END check_scloud in 333 ms [2025-09-08 18:21:12][357040732835785][333 ms][DEBUG] START check_boot_completed [2025-09-08 18:21:12][357040732835785][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:21:12][357040732835785][380 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:21:12][357040732835785][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:21:12][357040732835785][427 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:21:12][357040732835785][427 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:21:12][357040732835785][427 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:21:12][357040732835785][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040732835785\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3658\"}'\'' -e'"" [2025-09-08 18:21:12][357040732835785][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:21:12][357040732835785][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040732835785\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3658\"}'\'' -e'"" [2025-09-08 18:21:17][357040732835785][5941 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a72adac-7ea9-4331-8d6b-f570c4a90d21","id":"QR_7a72adac-7ea9-4331-8d6b-f570c4a90d21","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:21:17][357040732835785][6097 ms][DEBUG] proc_open done in 5670 ms; code=255; res.len=3343 [2025-09-08 18:21:17][357040732835785][6097 ms][DEBUG] END runCmdUntilRes#1 in 5671 ms [2025-09-08 18:21:17][357040732835785][6097 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:23:03][350246956076801][1 ms][INFO] === Request start === [2025-09-08 18:23:03][350246956076801][1 ms][DEBUG] START check_scloud [2025-09-08 18:23:03][350246956076801][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:23:03][350246956076801][267 ms][DEBUG] SU: done in 265 ms; outu0_a118 10078 4967 24677800 133352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:23:03][350246956076801][267 ms][DEBUG] targetPkg: running [2025-09-08 18:23:03][350246956076801][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-08 18:23:03][350246956076801][267 ms][DEBUG] START check_boot_completed [2025-09-08 18:23:03][350246956076801][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:23:03][350246956076801][313 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:23:03][350246956076801][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:23:03][350246956076801][360 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:23:03][350246956076801][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:23:03][350246956076801][360 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:23:03][350246956076801][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246956076801\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7793\"}'\'' -e'"" [2025-09-08 18:23:03][350246956076801][360 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:23:03][350246956076801][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246956076801\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7793\"}'\'' -e'"" [2025-09-08 18:23:09][350246956076801][5890 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_006667b6-edd3-48cf-9785-3895406dc40e","id":"QR_006667b6-edd3-48cf-9785-3895406dc40e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:23:09][350246956076801][6046 ms][DEBUG] proc_open done in 5686 ms; code=255; res.len=3343 [2025-09-08 18:23:09][350246956076801][6046 ms][DEBUG] END runCmdUntilRes#1 in 5686 ms [2025-09-08 18:23:09][350246956076801][6046 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:23:11][350246956076801][0 ms][INFO] === Request start === [2025-09-08 18:23:11][350246956076801][1 ms][DEBUG] START check_scloud [2025-09-08 18:23:11][350246956076801][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:23:12][350246956076801][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 10078 4967 24797872 142392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:23:12][350246956076801][268 ms][DEBUG] targetPkg: running [2025-09-08 18:23:12][350246956076801][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-08 18:23:12][350246956076801][268 ms][DEBUG] START check_boot_completed [2025-09-08 18:23:12][350246956076801][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:23:12][350246956076801][315 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:23:12][350246956076801][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:23:12][350246956076801][377 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:23:12][350246956076801][378 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:23:12][350246956076801][378 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:23:12][350246956076801][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246956076801\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4453\"}'\'' -e'"" [2025-09-08 18:23:12][350246956076801][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:23:12][350246956076801][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246956076801\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4453\"}'\'' -e'"" [2025-09-08 18:23:17][350246956076801][5688 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_affd8a0a-cc10-4f4c-9fb8-fc4a907de262","id":"QR_affd8a0a-cc10-4f4c-9fb8-fc4a907de262","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:23:17][350246956076801][5845 ms][DEBUG] proc_open done in 5466 ms; code=255; res.len=3343 [2025-09-08 18:23:17][350246956076801][5845 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-09-08 18:23:17][350246956076801][5845 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:24:04][352546731778110][0 ms][INFO] === Request start === [2025-09-08 18:24:04][352546731778110][1 ms][DEBUG] START check_scloud [2025-09-08 18:24:04][352546731778110][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:24:04][352546731778110][340 ms][DEBUG] SU: done in 339 ms; outu0_a118 10078 4967 24897396 146936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:24:04][352546731778110][340 ms][DEBUG] targetPkg: running [2025-09-08 18:24:04][352546731778110][340 ms][DEBUG] END check_scloud in 339 ms [2025-09-08 18:24:04][352546731778110][340 ms][DEBUG] START check_boot_completed [2025-09-08 18:24:04][352546731778110][340 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:24:04][352546731778110][386 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:24:04][352546731778110][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:24:05][352546731778110][433 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:24:05][352546731778110][433 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:24:05][352546731778110][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:24:05][352546731778110][544 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30502 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1406\nsuccessfulTxPacketsPerSecond: 1.9155233167601975\nretriedTxPackets: 204\nretriedTxPacketsPerSecond: 0.39573448741859024\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1337\nsuccessfulRxPacketsPerSecond: 1.6797666008512502\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:24:05][352546731778110][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:24:06][352546731778110][2074 ms][DEBUG] SU: done in 1529 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.874/191.874/191.874/0.000 ms\n [2025-09-08 18:24:06][352546731778110][2074 ms][DEBUG] check_internet: online [2025-09-08 18:24:06][352546731778110][2074 ms][DEBUG] rawBody.length=1161 [2025-09-08 18:24:06][352546731778110][2074 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546731778110\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3108\"}'\'' -e'"" [2025-09-08 18:24:06][352546731778110][2074 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:24:06][352546731778110][2074 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546731778110\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3108\"}'\'' -e'"" [2025-09-08 18:24:11][352546731778110][6651 ms][DEBUG] proc_open done in 4576 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 18:24:11][352546731778110][6651 ms][DEBUG] END runCmdUntilRes#1 in 4576 ms [2025-09-08 18:24:11][352546731778110][6651 ms][WARN] Detected error: Process with pid 10078 either refused to load frida-agent, or terminated during injectionProcess with pid 10078 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 18:24:11][352546731778110][6651 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 18:24:11][352546731778110][6932 ms][DEBUG] SU: done in 281 ms; outsystem 5385 4967 13066064 596668 futex_wait_queue_me 0 S system_server\nsystem 19656 1 12865440 117704 ptrace_stop 0 t system_server\n [2025-09-08 18:24:11][352546731778110][6932 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 18:24:11][352546731778110][7088 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 18:24:11][352546731778110][7088 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 18:24:11][352546731778110][7088 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:24:11][352546731778110][7229 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 18:24:11][352546731778110][7229 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:24:11][352546731778110][7401 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 18:24:13][352546731778110][9415 ms][DEBUG] START check_boot_completed [2025-09-08 18:24:13][352546731778110][9416 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:24:14][352546731778110][9462 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:24:14][352546731778110][9462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:24:14][352546731778110][9509 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:24:14][352546731778110][9509 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 18:24:17][352546731778110][12524 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 18:24:17][352546731778110][12524 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546731778110\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3108\"}'\'' -e'"" [2025-09-08 18:24:17][352546731778110][13197 ms][DEBUG] proc_open done in 672 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-08 18:24:17][352546731778110][13197 ms][DEBUG] END runCmdUntilRes#2 in 673 ms [2025-09-08 18:24:17][352546731778110][13197 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-08 18:24:17][352546731778110][13197 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 18:24:18][352546731778110][13462 ms][DEBUG] SU: done in 265 ms; out [2025-09-08 18:25:05][352546731778110][1 ms][INFO] === Request start === [2025-09-08 18:25:05][352546731778110][1 ms][DEBUG] START check_scloud [2025-09-08 18:25:05][352546731778110][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:25:05][352546731778110][404 ms][DEBUG] SU: done in 402 ms; out [2025-09-08 18:25:05][352546731778110][404 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:25:05][352546731778110][450 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 18:25:05][352546731778110][450 ms][DEBUG] check_devices: device found [2025-09-08 18:25:05][352546731778110][450 ms][WARN] targetPkg: not running, restarting [2025-09-08 18:25:05][352546731778110][450 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:25:05][352546731778110][591 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 18:25:05][352546731778110][591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:25:05][352546731778110][841 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 18:25:07][352546731778110][2856 ms][DEBUG] END check_scloud in 2855 ms [2025-09-08 18:25:07][352546731778110][2856 ms][DEBUG] START check_boot_completed [2025-09-08 18:25:07][352546731778110][2856 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:25:07][352546731778110][2903 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:25:07][352546731778110][2903 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:25:08][352546731778110][2981 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 18:25:08][352546731778110][2981 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 18:25:08][352546731778110][2981 ms][DEBUG] rawBody.length=1161 [2025-09-08 18:25:08][352546731778110][2981 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546731778110\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2028\"}'\'' -e'"" [2025-09-08 18:25:08][352546731778110][2981 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:25:08][352546731778110][2981 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546731778110\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2028\"}'\'' -e'"" [2025-09-08 18:25:14][352546731778110][9370 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35ec26a9-f165-49b1-8933-044533b6cda1","id":"QR_35ec26a9-f165-49b1-8933-044533b6cda1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:25:14][352546731778110][9526 ms][DEBUG] proc_open done in 6545 ms; code=255; res.len=3343 [2025-09-08 18:25:14][352546731778110][9526 ms][DEBUG] END runCmdUntilRes#1 in 6545 ms [2025-09-08 18:25:14][352546731778110][9526 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:25:18][352546731778110][0 ms][INFO] === Request start === [2025-09-08 18:25:18][352546731778110][1 ms][DEBUG] START check_scloud [2025-09-08 18:25:18][352546731778110][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:25:18][352546731778110][391 ms][DEBUG] SU: done in 390 ms; outu0_a118 24390 19827 23708252 111408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:25:18][352546731778110][391 ms][DEBUG] targetPkg: running [2025-09-08 18:25:18][352546731778110][391 ms][DEBUG] END check_scloud in 391 ms [2025-09-08 18:25:18][352546731778110][391 ms][DEBUG] START check_boot_completed [2025-09-08 18:25:18][352546731778110][391 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:25:18][352546731778110][438 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:25:18][352546731778110][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:25:18][352546731778110][500 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:25:18][352546731778110][500 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:25:18][352546731778110][500 ms][DEBUG] rawBody.length=1151 [2025-09-08 18:25:18][352546731778110][500 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546731778110\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8812\"}'\'' -e'"" [2025-09-08 18:25:18][352546731778110][500 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:25:18][352546731778110][501 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546731778110\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8812\"}'\'' -e'"" [2025-09-08 18:25:23][352546731778110][5764 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_844fdf53-92d1-465c-b3f4-328ba79be0d5","id":"QR_844fdf53-92d1-465c-b3f4-328ba79be0d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:25:24][352546731778110][5921 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-08 18:25:24][352546731778110][5921 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-08 18:25:24][352546731778110][5921 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:25:25][354747956606832][0 ms][INFO] === Request start === [2025-09-08 18:25:25][354747956606832][1 ms][DEBUG] START check_scloud [2025-09-08 18:25:25][354747956606832][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:25:26][354747956606832][402 ms][DEBUG] SU: done in 401 ms; outu0_a118 24390 19827 23876468 102108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:25:26][354747956606832][402 ms][DEBUG] targetPkg: running [2025-09-08 18:25:26][354747956606832][402 ms][DEBUG] END check_scloud in 402 ms [2025-09-08 18:25:26][354747956606832][402 ms][DEBUG] START check_boot_completed [2025-09-08 18:25:26][354747956606832][402 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:25:26][354747956606832][448 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 18:25:26][354747956606832][448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:25:26][354747956606832][510 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 18:25:26][354747956606832][510 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 18:25:26][354747956606832][510 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:25:26][354747956606832][510 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747956606832\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3078\"}'\'' -e'"" [2025-09-08 18:25:26][354747956606832][511 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:25:26][354747956606832][511 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747956606832\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3078\"}'\'' -e'"" [2025-09-08 18:25:30][354747956606832][4868 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_219a73f6-9605-421a-966d-23008d5c0373","id":"QR_219a73f6-9605-421a-966d-23008d5c0373","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:25:30][354747956606832][5025 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-09-08 18:25:30][354747956606832][5025 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-09-08 18:25:30][354747956606832][5025 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:25:33][354747956606832][0 ms][INFO] === Request start === [2025-09-08 18:25:33][354747956606832][1 ms][DEBUG] START check_scloud [2025-09-08 18:25:33][354747956606832][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:25:33][354747956606832][336 ms][DEBUG] SU: done in 336 ms; outu0_a118 24390 19827 23998424 90212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:25:33][354747956606832][336 ms][DEBUG] targetPkg: running [2025-09-08 18:25:33][354747956606832][337 ms][DEBUG] END check_scloud in 336 ms [2025-09-08 18:25:33][354747956606832][337 ms][DEBUG] START check_boot_completed [2025-09-08 18:25:33][354747956606832][337 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:25:33][354747956606832][383 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:25:33][354747956606832][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:25:33][354747956606832][539 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 18:25:33][354747956606832][539 ms][DEBUG] END check_boot_completed in 203 ms [2025-09-08 18:25:33][354747956606832][540 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:25:33][354747956606832][540 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747956606832\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4881\"}'\'' -e'"" [2025-09-08 18:25:33][354747956606832][540 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:25:33][354747956606832][540 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747956606832\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4881\"}'\'' -e'"" [2025-09-08 18:25:39][354747956606832][6335 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2cf178cd-527b-4504-8bce-790f29775dad","id":"QR_2cf178cd-527b-4504-8bce-790f29775dad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:25:39][354747956606832][6491 ms][DEBUG] proc_open done in 5951 ms; code=255; res.len=3343 [2025-09-08 18:25:39][354747956606832][6491 ms][DEBUG] END runCmdUntilRes#1 in 5951 ms [2025-09-08 18:25:39][354747956606832][6491 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:28:05][356389811418570][1 ms][INFO] === Request start === [2025-09-08 18:28:05][356389811418570][1 ms][DEBUG] START check_scloud [2025-09-08 18:28:05][356389811418570][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:28:05][356389811418570][334 ms][DEBUG] SU: done in 333 ms; outu0_a118 24390 19827 24042288 66124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:28:05][356389811418570][335 ms][DEBUG] targetPkg: running [2025-09-08 18:28:05][356389811418570][335 ms][DEBUG] END check_scloud in 334 ms [2025-09-08 18:28:05][356389811418570][335 ms][DEBUG] START check_boot_completed [2025-09-08 18:28:05][356389811418570][335 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:28:05][356389811418570][381 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:28:05][356389811418570][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:28:05][356389811418570][444 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:28:05][356389811418570][444 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:28:05][356389811418570][444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:28:05][356389811418570][584 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=451016 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 697\nsuccessfulTxPacketsPerSecond: 6.730822217711998\nretriedTxPackets: 133\nretriedTxPacketsPerSecond: 2.2044516723724614\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 761\nsuccessfulRxPacketsPerSecond: 6.746406389738864\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:28:05][356389811418570][585 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:28:07][356389811418570][2240 ms][DEBUG] SU: done in 1656 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.487/200.487/200.487/0.000 ms\n [2025-09-08 18:28:07][356389811418570][2240 ms][DEBUG] check_internet: online [2025-09-08 18:28:07][356389811418570][2240 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:28:07][356389811418570][2241 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356389811418570\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3111\"}'\'' -e'"" [2025-09-08 18:28:07][356389811418570][2241 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:28:07][356389811418570][2241 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356389811418570\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3111\"}'\'' -e'"" [2025-09-08 18:28:12][356389811418570][7380 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f20c2da-bdeb-493c-81f6-99463f15e733","id":"QR_2f20c2da-bdeb-493c-81f6-99463f15e733","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:28:12][356389811418570][7536 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 18:28:12][356389811418570][7536 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 18:28:12][356389811418570][7536 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:28:16][356389811418570][0 ms][INFO] === Request start === [2025-09-08 18:28:16][356389811418570][1 ms][DEBUG] START check_scloud [2025-09-08 18:28:16][356389811418570][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:28:16][356389811418570][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 24390 19827 24166456 87896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:28:16][356389811418570][319 ms][DEBUG] targetPkg: running [2025-09-08 18:28:16][356389811418570][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 18:28:16][356389811418570][319 ms][DEBUG] START check_boot_completed [2025-09-08 18:28:16][356389811418570][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:28:16][356389811418570][366 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:28:16][356389811418570][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:28:16][356389811418570][413 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 18:28:16][356389811418570][413 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 18:28:16][356389811418570][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:28:16][356389811418570][555 ms][DEBUG] SU: done in 142 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=451016 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 697\nsuccessfulTxPacketsPerSecond: 6.730822217711998\nretriedTxPackets: 133\nretriedTxPacketsPerSecond: 2.2044516723724614\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 761\nsuccessfulRxPacketsPerSecond: 6.746406389738864\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:28:16][356389811418570][555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:28:17][356389811418570][959 ms][DEBUG] SU: done in 404 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.941/252.941/252.941/0.000 ms\n [2025-09-08 18:28:17][356389811418570][960 ms][DEBUG] check_internet: online [2025-09-08 18:28:17][356389811418570][960 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:28:17][356389811418570][960 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356389811418570\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5320\"}'\'' -e'"" [2025-09-08 18:28:17][356389811418570][960 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:28:17][356389811418570][960 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356389811418570\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5320\"}'\'' -e'"" [2025-09-08 18:28:21][356389811418570][5177 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cbbd477e-de0c-496d-9e1a-38b696cc2af7","id":"QR_cbbd477e-de0c-496d-9e1a-38b696cc2af7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:28:21][356389811418570][5333 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-09-08 18:28:21][356389811418570][5333 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-09-08 18:28:21][356389811418570][5333 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:29:04][354725512130042][0 ms][INFO] === Request start === [2025-09-08 18:29:04][354725512130042][1 ms][DEBUG] START check_scloud [2025-09-08 18:29:04][354725512130042][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:29:05][354725512130042][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 24390 19827 24295608 100068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:29:05][354725512130042][262 ms][DEBUG] targetPkg: running [2025-09-08 18:29:05][354725512130042][262 ms][DEBUG] END check_scloud in 262 ms [2025-09-08 18:29:05][354725512130042][262 ms][DEBUG] START check_boot_completed [2025-09-08 18:29:05][354725512130042][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:29:05][354725512130042][309 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:29:05][354725512130042][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:29:05][354725512130042][403 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 18:29:05][354725512130042][403 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 18:29:05][354725512130042][403 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:29:05][354725512130042][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354725512130042\",\"model\":\"SM-M225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9520\"}'\'' -e'"" [2025-09-08 18:29:05][354725512130042][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:29:05][354725512130042][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354725512130042\",\"model\":\"SM-M225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9520\"}'\'' -e'"" [2025-09-08 18:29:09][354725512130042][4933 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04e39217-dbb9-4610-839d-5f4d29c2b6f4","id":"QR_04e39217-dbb9-4610-839d-5f4d29c2b6f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:29:10][354725512130042][5089 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-08 18:29:10][354725512130042][5089 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-08 18:29:10][354725512130042][5089 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:29:13][354725512130042][0 ms][INFO] === Request start === [2025-09-08 18:29:13][354725512130042][1 ms][DEBUG] START check_scloud [2025-09-08 18:29:13][354725512130042][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:29:13][354725512130042][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 24390 19827 24419200 111380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:29:13][354725512130042][283 ms][DEBUG] targetPkg: running [2025-09-08 18:29:13][354725512130042][283 ms][DEBUG] END check_scloud in 283 ms [2025-09-08 18:29:13][354725512130042][283 ms][DEBUG] START check_boot_completed [2025-09-08 18:29:13][354725512130042][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:29:13][354725512130042][330 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:29:13][354725512130042][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:29:13][354725512130042][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:29:13][354725512130042][377 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 18:29:13][354725512130042][377 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:29:13][354725512130042][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354725512130042\",\"model\":\"SM-M225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5973\"}'\'' -e'"" [2025-09-08 18:29:13][354725512130042][377 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:29:13][354725512130042][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354725512130042\",\"model\":\"SM-M225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5973\"}'\'' -e'"" [2025-09-08 18:29:17][354725512130042][3845 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ffd3ca94-385c-4517-b29d-d9eb64527891","id":"QR_ffd3ca94-385c-4517-b29d-d9eb64527891","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:29:17][354725512130042][4001 ms][DEBUG] proc_open done in 3623 ms; code=255; res.len=3343 [2025-09-08 18:29:17][354725512130042][4001 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-08 18:29:17][354725512130042][4001 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:31:04][351537275357289][1 ms][INFO] === Request start === [2025-09-08 18:31:04][351537275357289][1 ms][DEBUG] START check_scloud [2025-09-08 18:31:04][351537275357289][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:31:04][351537275357289][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 24390 19827 24531008 123804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:31:04][351537275357289][315 ms][DEBUG] targetPkg: running [2025-09-08 18:31:04][351537275357289][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 18:31:04][351537275357289][315 ms][DEBUG] START check_boot_completed [2025-09-08 18:31:04][351537275357289][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:31:04][351537275357289][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:31:04][351537275357289][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:31:04][351537275357289][424 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:31:04][351537275357289][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:31:04][351537275357289][424 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:31:04][351537275357289][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537275357289\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2995\"}'\'' -e'"" [2025-09-08 18:31:04][351537275357289][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:31:04][351537275357289][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537275357289\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2995\"}'\'' -e'"" [2025-09-08 18:31:10][351537275357289][5954 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0e91a11-12c7-44a4-ab5b-812aee0b3cae","id":"QR_e0e91a11-12c7-44a4-ab5b-812aee0b3cae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:31:10][351537275357289][6110 ms][DEBUG] proc_open done in 5686 ms; code=255; res.len=3343 [2025-09-08 18:31:10][351537275357289][6110 ms][DEBUG] END runCmdUntilRes#1 in 5686 ms [2025-09-08 18:31:10][351537275357289][6110 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:31:16][352334115391093][0 ms][INFO] === Request start === [2025-09-08 18:31:16][352334115391093][1 ms][DEBUG] START check_scloud [2025-09-08 18:31:16][352334115391093][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:31:16][352334115391093][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 24390 19827 24673608 134956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:31:16][352334115391093][304 ms][DEBUG] targetPkg: running [2025-09-08 18:31:16][352334115391093][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 18:31:16][352334115391093][304 ms][DEBUG] START check_boot_completed [2025-09-08 18:31:16][352334115391093][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:31:16][352334115391093][334 ms][DEBUG] ADB: done in 30 ms; out [2025-09-08 18:31:16][352334115391093][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:31:16][352334115391093][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:31:16][352334115391093][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 18:31:16][352334115391093][381 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:31:16][352334115391093][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334115391093\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6306\"}'\'' -e'"" [2025-09-08 18:31:16][352334115391093][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:31:16][352334115391093][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334115391093\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6306\"}'\'' -e'"" [2025-09-08 18:31:21][352334115391093][5083 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d72bd3b-7b92-42ce-8ac0-ad1a3dce34c4","id":"QR_7d72bd3b-7b92-42ce-8ac0-ad1a3dce34c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:31:21][352334115391093][5239 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-08 18:31:21][352334115391093][5239 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-08 18:31:21][352334115391093][5239 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:31:24][352334115391093][0 ms][INFO] === Request start === [2025-09-08 18:31:24][352334115391093][1 ms][DEBUG] START check_scloud [2025-09-08 18:31:24][352334115391093][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:31:25][352334115391093][273 ms][DEBUG] SU: done in 273 ms; outu0_a118 24390 19827 24807888 143076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:31:25][352334115391093][273 ms][DEBUG] targetPkg: running [2025-09-08 18:31:25][352334115391093][274 ms][DEBUG] END check_scloud in 273 ms [2025-09-08 18:31:25][352334115391093][274 ms][DEBUG] START check_boot_completed [2025-09-08 18:31:25][352334115391093][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:31:25][352334115391093][320 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:31:25][352334115391093][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:31:25][352334115391093][367 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:31:25][352334115391093][367 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:31:25][352334115391093][367 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:31:25][352334115391093][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334115391093\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1845\"}'\'' -e'"" [2025-09-08 18:31:25][352334115391093][367 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:31:25][352334115391093][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334115391093\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1845\"}'\'' -e'"" [2025-09-08 18:31:29][352334115391093][4366 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e384072-86f5-46df-bdda-cecd2d5203c1","id":"QR_4e384072-86f5-46df-bdda-cecd2d5203c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:31:29][352334115391093][4522 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-09-08 18:31:29][352334115391093][4522 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-09-08 18:31:29][352334115391093][4522 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:31:31][356513708554508][0 ms][INFO] === Request start === [2025-09-08 18:31:31][356513708554508][1 ms][DEBUG] START check_scloud [2025-09-08 18:31:31][356513708554508][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:31:31][356513708554508][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 24390 19827 24915508 154756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:31:31][356513708554508][307 ms][DEBUG] targetPkg: running [2025-09-08 18:31:31][356513708554508][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 18:31:31][356513708554508][307 ms][DEBUG] START check_boot_completed [2025-09-08 18:31:31][356513708554508][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:31:31][356513708554508][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:31:31][356513708554508][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:31:31][356513708554508][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:31:31][356513708554508][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:31:31][356513708554508][416 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:31:31][356513708554508][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513708554508\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2554\"}'\'' -e'"" [2025-09-08 18:31:31][356513708554508][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:31:31][356513708554508][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513708554508\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2554\"}'\'' -e'"" [2025-09-08 18:31:40][356513708554508][9430 ms][DEBUG] proc_open done in 9013 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 18:31:40][356513708554508][9430 ms][DEBUG] END runCmdUntilRes#1 in 9013 ms [2025-09-08 18:31:40][356513708554508][9430 ms][WARN] Detected error: Process with pid 24390 either refused to load frida-agent, or terminated during injectionProcess with pid 24390 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 18:31:40][356513708554508][9430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 18:31:40][356513708554508][9727 ms][DEBUG] SU: done in 297 ms; out [2025-09-08 18:31:40][356513708554508][9727 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 18:31:41][356513708554508][9868 ms][DEBUG] SU: done in 142 ms; out [2025-09-08 18:31:41][356513708554508][9868 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 18:31:41][356513708554508][9869 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:31:41][356513708554508][10211 ms][DEBUG] SU: done in 342 ms; out [2025-09-08 18:31:41][356513708554508][10211 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:31:41][356513708554508][10461 ms][DEBUG] SU: done in 250 ms; out [2025-09-08 18:31:43][356513708554508][12476 ms][DEBUG] START check_boot_completed [2025-09-08 18:31:43][356513708554508][12476 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:31:43][356513708554508][12523 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:31:43][356513708554508][12523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:31:43][356513708554508][12601 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 18:31:43][356513708554508][12601 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 18:31:46][356513708554508][15616 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 18:31:46][356513708554508][15616 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513708554508\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2554\"}'\'' -e'"" [2025-09-08 18:31:48][356513708554508][17069 ms][DEBUG] proc_open done in 1453 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-08 18:31:48][356513708554508][17069 ms][DEBUG] END runCmdUntilRes#2 in 1453 ms [2025-09-08 18:31:48][356513708554508][17069 ms][WARN] Detected error 2; Reboot the device [2025-09-08 18:31:48][356513708554508][17069 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 18:31:48][356513708554508][17334 ms][DEBUG] SU: done in 265 ms; outsystem 500 32636 7721300 136220 0 0 R system_server\n [2025-09-08 18:31:48][356513708554508][17334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-08 18:31:49][356513708554508][17975 ms][DEBUG] SU: done in 640 ms; out [2025-09-08 18:32:03][356513708554508][0 ms][INFO] === Request start === [2025-09-08 18:32:03][356513708554508][1 ms][DEBUG] START check_scloud [2025-09-08 18:32:03][356513708554508][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:32:03][356513708554508][50 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 18:32:03][356513708554508][50 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:32:03][356513708554508][97 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\n\n [2025-09-08 18:32:03][356513708554508][97 ms][WARN] check_devices: no device [2025-09-08 18:32:03][356513708554508][97 ms][WARN] check_devices: no device [2025-09-08 18:32:03][356513708554508][97 ms][DEBUG] END check_scloud in 96 ms [2025-09-08 18:33:04][356513708554508][1 ms][INFO] === Request start === [2025-09-08 18:33:04][356513708554508][1 ms][DEBUG] START check_scloud [2025-09-08 18:33:04][356513708554508][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:33:04][356513708554508][317 ms][DEBUG] SU: done in 316 ms; out [2025-09-08 18:33:04][356513708554508][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 18:33:04][356513708554508][363 ms][DEBUG] ADB: done in 46 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 18:33:04][356513708554508][363 ms][DEBUG] check_devices: device found [2025-09-08 18:33:04][356513708554508][363 ms][WARN] targetPkg: not running, restarting [2025-09-08 18:33:04][356513708554508][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:33:04][356513708554508][535 ms][DEBUG] SU: done in 172 ms; out [2025-09-08 18:33:04][356513708554508][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:33:04][356513708554508][785 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 18:33:06][356513708554508][2800 ms][DEBUG] END check_scloud in 2799 ms [2025-09-08 18:33:06][356513708554508][2800 ms][DEBUG] START check_boot_completed [2025-09-08 18:33:06][356513708554508][2800 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:33:06][356513708554508][2847 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:33:06][356513708554508][2847 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:33:07][356513708554508][2941 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 18:33:07][356513708554508][2941 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-08 18:33:07][356513708554508][2941 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:33:07][356513708554508][2941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513708554508\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1649\"}'\'' -e'"" [2025-09-08 18:33:07][356513708554508][2941 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:33:07][356513708554508][2941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513708554508\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1649\"}'\'' -e'"" [2025-09-08 18:33:37][356513708554508][33777 ms][DEBUG] proc_open done in 30836 ms (timeout); code=4; out.len=0 err.len=21 [2025-09-08 18:33:37][356513708554508][33777 ms][DEBUG] END runCmdUntilRes#1 in 30836 ms [2025-09-08 18:33:37][356513708554508][33778 ms][ERROR] NO RESULT; code=124 outTimeout was reached errTimeout was reached\r\n [2025-09-08 18:34:03][356513708554508][0 ms][INFO] === Request start === [2025-09-08 18:34:03][356513708554508][1 ms][DEBUG] START check_scloud [2025-09-08 18:34:03][356513708554508][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:34:04][356513708554508][416 ms][DEBUG] SU: done in 415 ms; outu0_a118 7186 4990 23569684 69292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:34:04][356513708554508][416 ms][DEBUG] targetPkg: running [2025-09-08 18:34:04][356513708554508][416 ms][DEBUG] END check_scloud in 416 ms [2025-09-08 18:34:04][356513708554508][416 ms][DEBUG] START check_boot_completed [2025-09-08 18:34:04][356513708554508][416 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:34:04][356513708554508][463 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:34:04][356513708554508][463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:34:04][356513708554508][557 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 18:34:04][356513708554508][557 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 18:34:04][356513708554508][557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:34:04][356513708554508][775 ms][DEBUG] SU: done in 219 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 215\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 23\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 213\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:34:04][356513708554508][776 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:34:05][356513708554508][2056 ms][DEBUG] SU: done in 1281 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=401 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 401.371/401.371/401.371/0.000 ms\n [2025-09-08 18:34:05][356513708554508][2057 ms][DEBUG] check_internet: online [2025-09-08 18:34:05][356513708554508][2057 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:34:05][356513708554508][2057 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513708554508\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8116\"}'\'' -e'"" [2025-09-08 18:34:05][356513708554508][2057 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:34:05][356513708554508][2057 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513708554508\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8116\"}'\'' -e'"" [2025-09-08 18:34:10][356513708554508][7102 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85a83287-f8cc-4ba0-a8b4-63dfb68e6650","id":"QR_85a83287-f8cc-4ba0-a8b4-63dfb68e6650","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:34:10][356513708554508][7258 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-08 18:34:10][356513708554508][7258 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-08 18:34:10][356513708554508][7258 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:34:13][356513708554508][0 ms][INFO] === Request start === [2025-09-08 18:34:13][356513708554508][1 ms][DEBUG] START check_scloud [2025-09-08 18:34:13][356513708554508][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:34:13][356513708554508][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 7186 4990 23780084 88788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:34:13][356513708554508][329 ms][DEBUG] targetPkg: running [2025-09-08 18:34:13][356513708554508][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-08 18:34:13][356513708554508][329 ms][DEBUG] START check_boot_completed [2025-09-08 18:34:13][356513708554508][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:34:13][356513708554508][376 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:34:13][356513708554508][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:34:13][356513708554508][438 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:34:13][356513708554508][438 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:34:13][356513708554508][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:34:13][356513708554508][547 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 406\nsuccessfulTxPacketsPerSecond: 10.303761110386194\nretriedTxPackets: 49\nretriedTxPacketsPerSecond: 1.4026062244504764\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 369\nsuccessfulRxPacketsPerSecond: 8.415637346702859\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:34:13][356513708554508][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:34:14][356513708554508][829 ms][DEBUG] SU: done in 282 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.608/156.608/156.608/0.000 ms\n [2025-09-08 18:34:14][356513708554508][829 ms][DEBUG] check_internet: online [2025-09-08 18:34:14][356513708554508][829 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:34:14][356513708554508][830 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513708554508\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6045\"}'\'' -e'"" [2025-09-08 18:34:14][356513708554508][830 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:34:14][356513708554508][830 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513708554508\",\"model\":\"SM-A256B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6045\"}'\'' -e'"" [2025-09-08 18:34:18][356513708554508][5702 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0fc024bc-1084-4421-bcd2-3c2e4e98ab41","id":"QR_0fc024bc-1084-4421-bcd2-3c2e4e98ab41","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:34:19][356513708554508][5858 ms][DEBUG] proc_open done in 5029 ms; code=255; res.len=3343 [2025-09-08 18:34:19][356513708554508][5859 ms][DEBUG] END runCmdUntilRes#1 in 5029 ms [2025-09-08 18:34:19][356513708554508][5859 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:34:23][350438050465911][0 ms][INFO] === Request start === [2025-09-08 18:34:23][350438050465911][1 ms][DEBUG] START check_scloud [2025-09-08 18:34:23][350438050465911][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:34:23][350438050465911][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 7186 4990 23900984 94496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:34:23][350438050465911][314 ms][DEBUG] targetPkg: running [2025-09-08 18:34:23][350438050465911][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 18:34:23][350438050465911][314 ms][DEBUG] START check_boot_completed [2025-09-08 18:34:23][350438050465911][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:34:23][350438050465911][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:34:23][350438050465911][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:34:23][350438050465911][407 ms][DEBUG] SU: done in 46 ms; out [2025-09-08 18:34:23][350438050465911][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:34:23][350438050465911][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:34:23][350438050465911][532 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 643\nsuccessfulTxPacketsPerSecond: 18.578814950928205\nretriedTxPackets: 61\nretriedTxPacketsPerSecond: 1.4966657843606856\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 686\nsuccessfulRxPacketsPerSecond: 23.350951876581185\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:34:23][350438050465911][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:34:24][350438050465911][829 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.364/187.364/187.364/0.000 ms\n [2025-09-08 18:34:24][350438050465911][829 ms][DEBUG] check_internet: online [2025-09-08 18:34:24][350438050465911][829 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:34:24][350438050465911][829 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350438050465911\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5045\"}'\'' -e'"" [2025-09-08 18:34:24][350438050465911][829 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:34:24][350438050465911][830 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350438050465911\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5045\"}'\'' -e'"" [2025-09-08 18:34:28][350438050465911][5671 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b8aa424-5f3d-4e4a-935b-60a397f74641","id":"QR_2b8aa424-5f3d-4e4a-935b-60a397f74641","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:34:29][350438050465911][5828 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-08 18:34:29][350438050465911][5828 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-08 18:34:29][350438050465911][5828 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:34:31][350438050465911][0 ms][INFO] === Request start === [2025-09-08 18:34:31][350438050465911][1 ms][DEBUG] START check_scloud [2025-09-08 18:34:31][350438050465911][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:34:31][350438050465911][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 7186 4990 24038420 104864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:34:31][350438050465911][292 ms][DEBUG] targetPkg: running [2025-09-08 18:34:31][350438050465911][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-08 18:34:31][350438050465911][292 ms][DEBUG] START check_boot_completed [2025-09-08 18:34:31][350438050465911][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:34:31][350438050465911][339 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:34:31][350438050465911][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:34:31][350438050465911][401 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:34:31][350438050465911][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:34:31][350438050465911][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:34:31][350438050465911][589 ms][DEBUG] SU: done in 188 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 684\nsuccessfulTxPacketsPerSecond: 5.32375722121553\nretriedTxPackets: 74\nretriedTxPacketsPerSecond: 1.4620580745363558\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 724\nsuccessfulRxPacketsPerSecond: 5.249518311415702\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:34:31][350438050465911][589 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:34:32][350438050465911][932 ms][DEBUG] SU: done in 344 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.733/156.733/156.733/0.000 ms\n [2025-09-08 18:34:32][350438050465911][933 ms][DEBUG] check_internet: online [2025-09-08 18:34:32][350438050465911][933 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:34:32][350438050465911][933 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350438050465911\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8145\"}'\'' -e'"" [2025-09-08 18:34:32][350438050465911][933 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:34:32][350438050465911][933 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350438050465911\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8145\"}'\'' -e'"" [2025-09-08 18:34:37][350438050465911][6275 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5154d66c-4cc6-4a95-b59c-33de9f5bb082","id":"QR_5154d66c-4cc6-4a95-b59c-33de9f5bb082","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:34:37][350438050465911][6431 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-09-08 18:34:37][350438050465911][6431 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-09-08 18:34:37][350438050465911][6431 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:35:03][352990183111794][0 ms][INFO] === Request start === [2025-09-08 18:35:03][352990183111794][1 ms][DEBUG] START check_scloud [2025-09-08 18:35:03][352990183111794][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:35:03][352990183111794][361 ms][DEBUG] SU: done in 360 ms; outu0_a118 7186 4990 24148080 82112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:35:03][352990183111794][361 ms][DEBUG] targetPkg: running [2025-09-08 18:35:03][352990183111794][361 ms][DEBUG] END check_scloud in 360 ms [2025-09-08 18:35:03][352990183111794][361 ms][DEBUG] START check_boot_completed [2025-09-08 18:35:03][352990183111794][361 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:35:03][352990183111794][407 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:35:03][352990183111794][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:35:03][352990183111794][456 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 18:35:03][352990183111794][456 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 18:35:03][352990183111794][456 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:35:03][352990183111794][456 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990183111794\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4669\"}'\'' -e'"" [2025-09-08 18:35:03][352990183111794][456 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:35:03][352990183111794][456 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990183111794\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4669\"}'\'' -e'"" [2025-09-08 18:35:07][352990183111794][3969 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21c09ca6-057a-44e8-b2e2-d706657e676e","id":"QR_21c09ca6-057a-44e8-b2e2-d706657e676e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:35:07][352990183111794][4125 ms][DEBUG] proc_open done in 3669 ms; code=255; res.len=3343 [2025-09-08 18:35:07][352990183111794][4125 ms][DEBUG] END runCmdUntilRes#1 in 3669 ms [2025-09-08 18:35:07][352990183111794][4125 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:35:09][352990183111794][1 ms][INFO] === Request start === [2025-09-08 18:35:09][352990183111794][1 ms][DEBUG] START check_scloud [2025-09-08 18:35:09][352990183111794][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:35:09][352990183111794][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 7186 4990 24305964 97648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:35:09][352990183111794][296 ms][DEBUG] targetPkg: running [2025-09-08 18:35:09][352990183111794][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-08 18:35:09][352990183111794][296 ms][DEBUG] START check_boot_completed [2025-09-08 18:35:09][352990183111794][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:35:10][352990183111794][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:35:10][352990183111794][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:35:10][352990183111794][421 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 18:35:10][352990183111794][421 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 18:35:10][352990183111794][421 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:35:10][352990183111794][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990183111794\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4939\"}'\'' -e'"" [2025-09-08 18:35:10][352990183111794][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:35:10][352990183111794][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990183111794\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4939\"}'\'' -e'"" [2025-09-08 18:35:14][352990183111794][4638 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e06dac1f-e1c9-4c78-8065-8d7adb7583c3","id":"QR_e06dac1f-e1c9-4c78-8065-8d7adb7583c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:35:14][352990183111794][4795 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-09-08 18:35:14][352990183111794][4795 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-09-08 18:35:14][352990183111794][4795 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:38:03][355355250796793][1 ms][INFO] === Request start === [2025-09-08 18:38:03][355355250796793][1 ms][DEBUG] START check_scloud [2025-09-08 18:38:03][355355250796793][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:38:03][355355250796793][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 7186 4990 24393068 111900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:38:03][355355250796793][256 ms][DEBUG] targetPkg: running [2025-09-08 18:38:03][355355250796793][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-08 18:38:03][355355250796793][256 ms][DEBUG] START check_boot_completed [2025-09-08 18:38:03][355355250796793][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:38:03][355355250796793][286 ms][DEBUG] ADB: done in 29 ms; out [2025-09-08 18:38:03][355355250796793][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:38:03][355355250796793][332 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:38:03][355355250796793][333 ms][DEBUG] END check_boot_completed in 76 ms [2025-09-08 18:38:03][355355250796793][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:38:03][355355250796793][489 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 684\nsuccessfulTxPacketsPerSecond: 5.32375722121553\nretriedTxPackets: 74\nretriedTxPacketsPerSecond: 1.4620580745363558\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 724\nsuccessfulRxPacketsPerSecond: 5.249518311415702\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:38:03][355355250796793][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:38:04][355355250796793][879 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=273 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 273.902/273.902/273.902/0.000 ms\n [2025-09-08 18:38:04][355355250796793][879 ms][DEBUG] check_internet: online [2025-09-08 18:38:04][355355250796793][879 ms][DEBUG] rawBody.length=1149 [2025-09-08 18:38:04][355355250796793][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355250796793\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8636\"}'\'' -e'"" [2025-09-08 18:38:04][355355250796793][879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:38:04][355355250796793][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355250796793\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8636\"}'\'' -e'"" [2025-09-08 18:38:09][355355250796793][5847 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8aa6656f-dd5e-4113-8e20-346cf6241d27","id":"QR_8aa6656f-dd5e-4113-8e20-346cf6241d27","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:38:09][355355250796793][6003 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-08 18:38:09][355355250796793][6003 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-08 18:38:09][355355250796793][6003 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:38:11][355355250796793][0 ms][INFO] === Request start === [2025-09-08 18:38:11][355355250796793][1 ms][DEBUG] START check_scloud [2025-09-08 18:38:11][355355250796793][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:38:11][355355250796793][340 ms][DEBUG] SU: done in 339 ms; outu0_a118 7186 4990 24519284 123388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:38:11][355355250796793][340 ms][DEBUG] targetPkg: running [2025-09-08 18:38:11][355355250796793][340 ms][DEBUG] END check_scloud in 339 ms [2025-09-08 18:38:11][355355250796793][340 ms][DEBUG] START check_boot_completed [2025-09-08 18:38:11][355355250796793][340 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:38:11][355355250796793][387 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:38:11][355355250796793][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:38:12][355355250796793][449 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:38:12][355355250796793][449 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:38:12][355355250796793][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:38:12][355355250796793][559 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 684\nsuccessfulTxPacketsPerSecond: 5.32375722121553\nretriedTxPackets: 74\nretriedTxPacketsPerSecond: 1.4620580745363558\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 724\nsuccessfulRxPacketsPerSecond: 5.249518311415702\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:38:12][355355250796793][559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:38:12][355355250796793][856 ms][DEBUG] SU: done in 296 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.562/163.562/163.562/0.000 ms\n [2025-09-08 18:38:12][355355250796793][856 ms][DEBUG] check_internet: online [2025-09-08 18:38:12][355355250796793][856 ms][DEBUG] rawBody.length=1159 [2025-09-08 18:38:12][355355250796793][856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355250796793\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8312\"}'\'' -e'"" [2025-09-08 18:38:12][355355250796793][856 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:38:12][355355250796793][856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355250796793\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8312\"}'\'' -e'"" [2025-09-08 18:38:17][355355250796793][6042 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d00ade01-906f-43e9-9665-8102efb8f068","id":"QR_d00ade01-906f-43e9-9665-8102efb8f068","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:38:17][355355250796793][6198 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-09-08 18:38:17][355355250796793][6198 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-09-08 18:38:17][355355250796793][6198 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:39:03][352288963680025][0 ms][INFO] === Request start === [2025-09-08 18:39:03][352288963680025][1 ms][DEBUG] START check_scloud [2025-09-08 18:39:03][352288963680025][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:39:03][352288963680025][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 7186 4990 24629044 133244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:39:03][352288963680025][265 ms][DEBUG] targetPkg: running [2025-09-08 18:39:03][352288963680025][265 ms][DEBUG] END check_scloud in 265 ms [2025-09-08 18:39:03][352288963680025][265 ms][DEBUG] START check_boot_completed [2025-09-08 18:39:03][352288963680025][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:39:03][352288963680025][312 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:39:03][352288963680025][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:39:03][352288963680025][359 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:39:03][352288963680025][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:39:03][352288963680025][359 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:39:03][352288963680025][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963680025\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6368\"}'\'' -e'"" [2025-09-08 18:39:03][352288963680025][359 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:39:03][352288963680025][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963680025\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6368\"}'\'' -e'"" [2025-09-08 18:39:06][352288963680025][3686 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ed93a53-db6e-4c50-94ef-e2326594fa39","id":"QR_5ed93a53-db6e-4c50-94ef-e2326594fa39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:39:07][352288963680025][3842 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-08 18:39:07][352288963680025][3842 ms][DEBUG] END runCmdUntilRes#1 in 3484 ms [2025-09-08 18:39:07][352288963680025][3842 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:39:09][352288963680025][0 ms][INFO] === Request start === [2025-09-08 18:39:09][352288963680025][1 ms][DEBUG] START check_scloud [2025-09-08 18:39:09][352288963680025][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:39:09][352288963680025][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 7186 4990 24759356 138672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:39:09][352288963680025][274 ms][DEBUG] targetPkg: running [2025-09-08 18:39:09][352288963680025][274 ms][DEBUG] END check_scloud in 274 ms [2025-09-08 18:39:09][352288963680025][274 ms][DEBUG] START check_boot_completed [2025-09-08 18:39:09][352288963680025][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:39:09][352288963680025][321 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:39:09][352288963680025][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:39:09][352288963680025][369 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 18:39:09][352288963680025][369 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 18:39:09][352288963680025][369 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:39:09][352288963680025][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963680025\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8273\"}'\'' -e'"" [2025-09-08 18:39:09][352288963680025][369 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:39:09][352288963680025][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963680025\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8273\"}'\'' -e'"" [2025-09-08 18:39:14][352288963680025][4945 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_84356410-8814-45dc-a72f-f035621b240e","id":"QR_84356410-8814-45dc-a72f-f035621b240e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:39:14][352288963680025][5101 ms][DEBUG] proc_open done in 4732 ms; code=255; res.len=3343 [2025-09-08 18:39:14][352288963680025][5101 ms][DEBUG] END runCmdUntilRes#1 in 4732 ms [2025-09-08 18:39:14][352288963680025][5101 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:43:03][351797843722956][1 ms][INFO] === Request start === [2025-09-08 18:43:03][351797843722956][1 ms][DEBUG] START check_scloud [2025-09-08 18:43:03][351797843722956][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:43:04][351797843722956][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 7186 4990 24869120 150064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:43:04][351797843722956][301 ms][DEBUG] targetPkg: running [2025-09-08 18:43:04][351797843722956][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-08 18:43:04][351797843722956][301 ms][DEBUG] START check_boot_completed [2025-09-08 18:43:04][351797843722956][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:43:04][351797843722956][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 18:43:04][351797843722956][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:43:04][351797843722956][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:43:04][351797843722956][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 18:43:04][351797843722956][379 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:43:04][351797843722956][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351797843722956\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4133\"}'\'' -e'"" [2025-09-08 18:43:04][351797843722956][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:43:04][351797843722956][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351797843722956\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4133\"}'\'' -e'"" [2025-09-08 18:43:08][351797843722956][4784 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_84447631-deb4-4516-9049-64a44bcebe01","id":"QR_84447631-deb4-4516-9049-64a44bcebe01","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:43:08][351797843722956][4940 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-09-08 18:43:08][351797843722956][4940 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-08 18:43:08][351797843722956][4940 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:43:11][351797843722956][0 ms][INFO] === Request start === [2025-09-08 18:43:11][351797843722956][1 ms][DEBUG] START check_scloud [2025-09-08 18:43:11][351797843722956][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:43:11][351797843722956][265 ms][DEBUG] SU: done in 265 ms; outu0_a118 7186 4990 25046536 160300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:43:11][351797843722956][266 ms][DEBUG] targetPkg: running [2025-09-08 18:43:11][351797843722956][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-08 18:43:11][351797843722956][266 ms][DEBUG] START check_boot_completed [2025-09-08 18:43:11][351797843722956][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:43:11][351797843722956][312 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:43:11][351797843722956][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:43:11][351797843722956][359 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:43:11][351797843722956][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:43:11][351797843722956][359 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:43:11][351797843722956][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351797843722956\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2504\"}'\'' -e'"" [2025-09-08 18:43:11][351797843722956][359 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:43:11][351797843722956][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351797843722956\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2504\"}'\'' -e'"" [2025-09-08 18:43:15][351797843722956][4702 ms][DEBUG] proc_open done in 4343 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 18:43:15][351797843722956][4702 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-09-08 18:43:15][351797843722956][4702 ms][WARN] Detected error: Process with pid 7186 either refused to load frida-agent, or terminated during injectionProcess with pid 7186 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 18:43:15][351797843722956][4702 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 18:43:15][351797843722956][4952 ms][DEBUG] SU: done in 250 ms; outsystem 5411 4990 13023348 291168 ep_poll 0 S system_server\n [2025-09-08 18:43:15][351797843722956][4952 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 18:43:16][351797843722956][5092 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 18:43:16][351797843722956][5092 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 18:43:16][351797843722956][5093 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:43:16][351797843722956][5233 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 18:43:16][351797843722956][5233 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:43:16][351797843722956][5467 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 18:43:18][351797843722956][7482 ms][DEBUG] START check_boot_completed [2025-09-08 18:43:18][351797843722956][7483 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:43:18][351797843722956][7529 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:43:18][351797843722956][7529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:43:18][351797843722956][7577 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 18:43:18][351797843722956][7578 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 18:43:21][351797843722956][10591 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 18:43:21][351797843722956][10591 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351797843722956\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2504\"}'\'' -e'"" [2025-09-08 18:43:27][351797843722956][16043 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_49669c7f-ed6f-41c2-813d-0028c5a43059","id":"QR_49669c7f-ed6f-41c2-813d-0028c5a43059","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:43:27][351797843722956][16199 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-09-08 18:43:27][351797843722956][16199 ms][DEBUG] END runCmdUntilRes#2 in 5608 ms [2025-09-08 18:43:27][351797843722956][16199 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:46:05][352485220803859][1 ms][INFO] === Request start === [2025-09-08 18:46:05][352485220803859][1 ms][DEBUG] START check_scloud [2025-09-08 18:46:05][352485220803859][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:46:05][352485220803859][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 18862 4990 23745384 135944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:46:05][352485220803859][320 ms][DEBUG] targetPkg: running [2025-09-08 18:46:05][352485220803859][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 18:46:05][352485220803859][320 ms][DEBUG] START check_boot_completed [2025-09-08 18:46:05][352485220803859][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:46:05][352485220803859][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:46:05][352485220803859][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:46:05][352485220803859][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:46:05][352485220803859][414 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 18:46:05][352485220803859][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:46:05][352485220803859][555 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1453\nsuccessfulTxPacketsPerSecond: 1.3052532290902086\nretriedTxPackets: 212\nretriedTxPacketsPerSecond: 0.1992753021511769\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1408\nsuccessfulRxPacketsPerSecond: 1.1757242826919436\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:46:05][352485220803859][555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:46:07][352485220803859][2054 ms][DEBUG] SU: done in 1499 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.825/202.825/202.825/0.000 ms\n [2025-09-08 18:46:07][352485220803859][2054 ms][DEBUG] check_internet: online [2025-09-08 18:46:07][352485220803859][2054 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:46:07][352485220803859][2055 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485220803859\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8287\"}'\'' -e'"" [2025-09-08 18:46:07][352485220803859][2055 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:46:07][352485220803859][2055 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485220803859\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8287\"}'\'' -e'"" [2025-09-08 18:46:12][352485220803859][6959 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e05e0cf7-9cb5-44c0-9740-3a33f0756a57","id":"QR_e05e0cf7-9cb5-44c0-9740-3a33f0756a57","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:46:12][352485220803859][7115 ms][DEBUG] proc_open done in 5060 ms; code=255; res.len=3343 [2025-09-08 18:46:12][352485220803859][7115 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-09-08 18:46:12][352485220803859][7115 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:46:15][352485220803859][0 ms][INFO] === Request start === [2025-09-08 18:46:15][352485220803859][1 ms][DEBUG] START check_scloud [2025-09-08 18:46:15][352485220803859][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:46:16][352485220803859][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 18862 4990 23887856 146716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:46:16][352485220803859][269 ms][DEBUG] targetPkg: running [2025-09-08 18:46:16][352485220803859][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-08 18:46:16][352485220803859][269 ms][DEBUG] START check_boot_completed [2025-09-08 18:46:16][352485220803859][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:46:16][352485220803859][300 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 18:46:16][352485220803859][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:46:16][352485220803859][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:46:16][352485220803859][347 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 18:46:16][352485220803859][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:46:16][352485220803859][457 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1453\nsuccessfulTxPacketsPerSecond: 1.3052532290902086\nretriedTxPackets: 212\nretriedTxPacketsPerSecond: 0.1992753021511769\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1408\nsuccessfulRxPacketsPerSecond: 1.1757242826919436\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:46:16][352485220803859][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:46:16][352485220803859][785 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.637/184.637/184.637/0.000 ms\n [2025-09-08 18:46:16][352485220803859][785 ms][DEBUG] check_internet: online [2025-09-08 18:46:16][352485220803859][785 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:46:16][352485220803859][785 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485220803859\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3046\"}'\'' -e'"" [2025-09-08 18:46:16][352485220803859][785 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:46:16][352485220803859][785 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485220803859\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3046\"}'\'' -e'"" [2025-09-08 18:46:20][352485220803859][4924 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d906399-11af-4e04-84fa-13ea875360c0","id":"QR_5d906399-11af-4e04-84fa-13ea875360c0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:46:20][352485220803859][5080 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-09-08 18:46:20][352485220803859][5081 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-09-08 18:46:20][352485220803859][5081 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:51:04][356353929009242][1 ms][INFO] === Request start === [2025-09-08 18:51:04][356353929009242][1 ms][DEBUG] START check_scloud [2025-09-08 18:51:04][356353929009242][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:51:04][356353929009242][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 18862 4990 24033540 149712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:51:04][356353929009242][268 ms][DEBUG] targetPkg: running [2025-09-08 18:51:04][356353929009242][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-08 18:51:04][356353929009242][268 ms][DEBUG] START check_boot_completed [2025-09-08 18:51:04][356353929009242][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:51:04][356353929009242][299 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 18:51:04][356353929009242][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:51:04][356353929009242][347 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 18:51:04][356353929009242][347 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 18:51:04][356353929009242][347 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:51:04][356353929009242][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356353929009242\",\"model\":\"SM-M146B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1029\"}'\'' -e'"" [2025-09-08 18:51:04][356353929009242][347 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:51:04][356353929009242][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356353929009242\",\"model\":\"SM-M146B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1029\"}'\'' -e'"" [2025-09-08 18:51:10][356353929009242][6110 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc6555b5-b440-4087-82c8-0c1397d18541","id":"QR_bc6555b5-b440-4087-82c8-0c1397d18541","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:51:10][356353929009242][6267 ms][DEBUG] proc_open done in 5919 ms; code=255; res.len=3343 [2025-09-08 18:51:10][356353929009242][6267 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-09-08 18:51:10][356353929009242][6267 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:51:14][356353929009242][0 ms][INFO] === Request start === [2025-09-08 18:51:14][356353929009242][1 ms][DEBUG] START check_scloud [2025-09-08 18:51:14][356353929009242][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:51:14][356353929009242][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 18862 4990 24208780 151324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:51:14][356353929009242][295 ms][DEBUG] targetPkg: running [2025-09-08 18:51:14][356353929009242][295 ms][DEBUG] END check_scloud in 295 ms [2025-09-08 18:51:14][356353929009242][295 ms][DEBUG] START check_boot_completed [2025-09-08 18:51:14][356353929009242][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:51:14][356353929009242][326 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 18:51:14][356353929009242][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:51:14][356353929009242][389 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 18:51:14][356353929009242][389 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:51:14][356353929009242][389 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:51:14][356353929009242][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356353929009242\",\"model\":\"SM-M146B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4567\"}'\'' -e'"" [2025-09-08 18:51:14][356353929009242][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:51:14][356353929009242][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356353929009242\",\"model\":\"SM-M146B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4567\"}'\'' -e'"" [2025-09-08 18:51:18][356353929009242][4279 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b7ab51c-4708-4f7c-9245-0145abc240e2","id":"QR_0b7ab51c-4708-4f7c-9245-0145abc240e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:51:18][356353929009242][4435 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-09-08 18:51:18][356353929009242][4435 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-09-08 18:51:18][356353929009242][4435 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:52:03][355859838130045][1 ms][INFO] === Request start === [2025-09-08 18:52:03][355859838130045][1 ms][DEBUG] START check_scloud [2025-09-08 18:52:03][355859838130045][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:52:04][355859838130045][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 18862 4990 24298060 162028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:52:04][355859838130045][320 ms][DEBUG] targetPkg: running [2025-09-08 18:52:04][355859838130045][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 18:52:04][355859838130045][320 ms][DEBUG] START check_boot_completed [2025-09-08 18:52:04][355859838130045][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:52:04][355859838130045][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 18:52:04][355859838130045][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:52:04][355859838130045][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:52:04][355859838130045][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 18:52:04][355859838130045][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:52:04][355859838130045][508 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1526\nsuccessfulTxPacketsPerSecond: 0.034821367364427515\nretriedTxPackets: 239\nretriedTxPacketsPerSecond: 0.0348213666240754\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1471\nsuccessfulRxPacketsPerSecond: 0.034821367203481404\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:52:04][355859838130045][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:52:05][355859838130045][1742 ms][DEBUG] SU: done in 1234 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.500/191.500/191.500/0.000 ms\n [2025-09-08 18:52:05][355859838130045][1742 ms][DEBUG] check_internet: online [2025-09-08 18:52:05][355859838130045][1742 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:52:05][355859838130045][1742 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859838130045\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1863\"}'\'' -e'"" [2025-09-08 18:52:05][355859838130045][1742 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:52:05][355859838130045][1743 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859838130045\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1863\"}'\'' -e'"" [2025-09-08 18:52:08][355859838130045][4991 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_913e9063-fa10-435f-a899-a9ca11cf5d63","id":"QR_913e9063-fa10-435f-a899-a9ca11cf5d63","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:52:09][355859838130045][5147 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=3343 [2025-09-08 18:52:09][355859838130045][5148 ms][DEBUG] END runCmdUntilRes#1 in 3405 ms [2025-09-08 18:52:09][355859838130045][5148 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:52:11][355859838130045][0 ms][INFO] === Request start === [2025-09-08 18:52:11][355859838130045][1 ms][DEBUG] START check_scloud [2025-09-08 18:52:11][355859838130045][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:52:11][355859838130045][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 18862 4990 24432468 173884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:52:11][355859838130045][305 ms][DEBUG] targetPkg: running [2025-09-08 18:52:11][355859838130045][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 18:52:11][355859838130045][305 ms][DEBUG] START check_boot_completed [2025-09-08 18:52:11][355859838130045][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:52:11][355859838130045][334 ms][DEBUG] ADB: done in 29 ms; out [2025-09-08 18:52:11][355859838130045][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:52:11][355859838130045][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:52:11][355859838130045][381 ms][DEBUG] END check_boot_completed in 76 ms [2025-09-08 18:52:11][355859838130045][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:52:12][355859838130045][506 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1526\nsuccessfulTxPacketsPerSecond: 0.034821367364427515\nretriedTxPackets: 239\nretriedTxPacketsPerSecond: 0.0348213666240754\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1471\nsuccessfulRxPacketsPerSecond: 0.034821367203481404\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:52:12][355859838130045][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:52:12][355859838130045][865 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=234 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 234.522/234.522/234.522/0.000 ms\n [2025-09-08 18:52:12][355859838130045][865 ms][DEBUG] check_internet: online [2025-09-08 18:52:12][355859838130045][865 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:52:12][355859838130045][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859838130045\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2686\"}'\'' -e'"" [2025-09-08 18:52:12][355859838130045][865 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:52:12][355859838130045][865 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859838130045\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2686\"}'\'' -e'"" [2025-09-08 18:52:17][355859838130045][5911 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f0077d1-e7f8-4a9e-9d4e-2684510eeb0d","id":"QR_4f0077d1-e7f8-4a9e-9d4e-2684510eeb0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:52:17][355859838130045][6067 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-08 18:52:17][355859838130045][6067 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-08 18:52:17][355859838130045][6067 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:53:06][355418871504895][0 ms][INFO] === Request start === [2025-09-08 18:53:06][355418871504895][1 ms][DEBUG] START check_scloud [2025-09-08 18:53:06][355418871504895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:53:06][355418871504895][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 18862 4990 24552468 181252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:53:06][355418871504895][317 ms][DEBUG] targetPkg: running [2025-09-08 18:53:06][355418871504895][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 18:53:06][355418871504895][317 ms][DEBUG] START check_boot_completed [2025-09-08 18:53:06][355418871504895][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:53:06][355418871504895][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:53:06][355418871504895][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:53:06][355418871504895][426 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 18:53:06][355418871504895][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 18:53:06][355418871504895][426 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:53:06][355418871504895][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355418871504895\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3134\"}'\'' -e'"" [2025-09-08 18:53:06][355418871504895][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:53:06][355418871504895][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355418871504895\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3134\"}'\'' -e'"" [2025-09-08 18:53:11][355418871504895][4675 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c392b6f-e7fb-4c1c-9a30-f1e8d48de475","id":"QR_6c392b6f-e7fb-4c1c-9a30-f1e8d48de475","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:53:11][355418871504895][4831 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=3343 [2025-09-08 18:53:11][355418871504895][4831 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-09-08 18:53:11][355418871504895][4831 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:53:15][352600224705104][0 ms][INFO] === Request start === [2025-09-08 18:53:15][352600224705104][1 ms][DEBUG] START check_scloud [2025-09-08 18:53:15][352600224705104][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:53:16][352600224705104][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 18862 4990 24699036 193012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:53:16][352600224705104][306 ms][DEBUG] targetPkg: running [2025-09-08 18:53:16][352600224705104][306 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 18:53:16][352600224705104][306 ms][DEBUG] START check_boot_completed [2025-09-08 18:53:16][352600224705104][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:53:16][352600224705104][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:53:16][352600224705104][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:53:16][352600224705104][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:53:16][352600224705104][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 18:53:16][352600224705104][400 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:53:16][352600224705104][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224705104\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7353\"}'\'' -e'"" [2025-09-08 18:53:16][352600224705104][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:53:16][352600224705104][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224705104\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7353\"}'\'' -e'"" [2025-09-08 18:53:20][352600224705104][5102 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ace41455-7d9f-4be9-bb10-efc606fe6b79","id":"QR_ace41455-7d9f-4be9-bb10-efc606fe6b79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:53:21][352600224705104][5258 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-08 18:53:21][352600224705104][5258 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-08 18:53:21][352600224705104][5258 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:53:23][352600224705104][0 ms][INFO] === Request start === [2025-09-08 18:53:23][352600224705104][1 ms][DEBUG] START check_scloud [2025-09-08 18:53:23][352600224705104][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:53:23][352600224705104][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 18862 4990 24864164 203704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:53:23][352600224705104][265 ms][DEBUG] targetPkg: running [2025-09-08 18:53:23][352600224705104][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-08 18:53:23][352600224705104][265 ms][DEBUG] START check_boot_completed [2025-09-08 18:53:23][352600224705104][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:53:23][352600224705104][311 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:53:23][352600224705104][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:53:23][352600224705104][405 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 18:53:23][352600224705104][405 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-08 18:53:23][352600224705104][405 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:53:23][352600224705104][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224705104\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8456\"}'\'' -e'"" [2025-09-08 18:53:23][352600224705104][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:53:23][352600224705104][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224705104\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8456\"}'\'' -e'"" [2025-09-08 18:53:28][352600224705104][5091 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eaa3086f-65d5-4469-8460-056811da8087","id":"QR_eaa3086f-65d5-4469-8460-056811da8087","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:53:28][352600224705104][5248 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-08 18:53:28][352600224705104][5248 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-08 18:53:28][352600224705104][5248 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:53:34][356927268161340][0 ms][INFO] === Request start === [2025-09-08 18:53:34][356927268161340][1 ms][DEBUG] START check_scloud [2025-09-08 18:53:34][356927268161340][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:53:34][356927268161340][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 18862 4990 25029068 215000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:53:34][356927268161340][308 ms][DEBUG] targetPkg: running [2025-09-08 18:53:34][356927268161340][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 18:53:34][356927268161340][309 ms][DEBUG] START check_boot_completed [2025-09-08 18:53:34][356927268161340][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:53:34][356927268161340][353 ms][DEBUG] ADB: done in 44 ms; out [2025-09-08 18:53:34][356927268161340][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:53:34][356927268161340][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:53:34][356927268161340][400 ms][DEBUG] END check_boot_completed in 91 ms [2025-09-08 18:53:34][356927268161340][400 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:53:34][356927268161340][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927268161340\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8723\"}'\'' -e'"" [2025-09-08 18:53:34][356927268161340][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:53:34][356927268161340][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927268161340\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8723\"}'\'' -e'"" [2025-09-08 18:53:39][356927268161340][5102 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33744a9f-fecc-4405-a527-3f4c7627bb76","id":"QR_33744a9f-fecc-4405-a527-3f4c7627bb76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:53:39][356927268161340][5258 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-08 18:53:39][356927268161340][5258 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-08 18:53:39][356927268161340][5258 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:53:42][356927268161340][0 ms][INFO] === Request start === [2025-09-08 18:53:42][356927268161340][1 ms][DEBUG] START check_scloud [2025-09-08 18:53:42][356927268161340][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:53:43][356927268161340][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 18862 4990 25181232 226424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:53:43][356927268161340][309 ms][DEBUG] targetPkg: running [2025-09-08 18:53:43][356927268161340][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 18:53:43][356927268161340][309 ms][DEBUG] START check_boot_completed [2025-09-08 18:53:43][356927268161340][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:53:43][356927268161340][354 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 18:53:43][356927268161340][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:53:43][356927268161340][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:53:43][356927268161340][401 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 18:53:43][356927268161340][401 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:53:43][356927268161340][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927268161340\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9671\"}'\'' -e'"" [2025-09-08 18:53:43][356927268161340][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:53:43][356927268161340][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927268161340\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9671\"}'\'' -e'"" [2025-09-08 18:53:47][356927268161340][4291 ms][DEBUG] proc_open done in 3889 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 18:53:47][356927268161340][4291 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-08 18:53:47][356927268161340][4291 ms][WARN] Detected error: Process with pid 18862 either refused to load frida-agent, or terminated during injectionProcess with pid 18862 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 18:53:47][356927268161340][4291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 18:53:47][356927268161340][4588 ms][DEBUG] SU: done in 297 ms; outsystem 5411 4990 12932832 224872 ep_poll 0 S system_server\n [2025-09-08 18:53:47][356927268161340][4588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 18:53:47][356927268161340][4728 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 18:53:47][356927268161340][4728 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 18:53:47][356927268161340][4728 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 18:53:47][356927268161340][4853 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 18:53:47][356927268161340][4853 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 18:53:47][356927268161340][5025 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 18:53:49][356927268161340][7040 ms][DEBUG] START check_boot_completed [2025-09-08 18:53:49][356927268161340][7040 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:53:49][356927268161340][7087 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:53:49][356927268161340][7088 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:53:49][356927268161340][7151 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 18:53:49][356927268161340][7151 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-08 18:53:52][356927268161340][10164 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 18:53:52][356927268161340][10165 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927268161340\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9671\"}'\'' -e'"" [2025-09-08 18:53:56][356927268161340][13476 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_01707b09-e4ab-4de6-af0c-ea411a2f490e","id":"QR_01707b09-e4ab-4de6-af0c-ea411a2f490e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:53:56][356927268161340][13632 ms][DEBUG] proc_open done in 3468 ms; code=255; res.len=3343 [2025-09-08 18:53:56][356927268161340][13632 ms][DEBUG] END runCmdUntilRes#2 in 3468 ms [2025-09-08 18:53:56][356927268161340][13633 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:54:03][352677531310745][0 ms][INFO] === Request start === [2025-09-08 18:54:03][352677531310745][1 ms][DEBUG] START check_scloud [2025-09-08 18:54:03][352677531310745][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:54:03][352677531310745][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 20875 4990 23764600 131628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:54:03][352677531310745][254 ms][DEBUG] targetPkg: running [2025-09-08 18:54:03][352677531310745][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-08 18:54:03][352677531310745][254 ms][DEBUG] START check_boot_completed [2025-09-08 18:54:03][352677531310745][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:54:03][352677531310745][301 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:54:03][352677531310745][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:54:03][352677531310745][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:54:03][352677531310745][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:54:03][352677531310745][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:54:03][352677531310745][457 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1526\nsuccessfulTxPacketsPerSecond: 0.034821367364427515\nretriedTxPackets: 239\nretriedTxPacketsPerSecond: 0.0348213666240754\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1471\nsuccessfulRxPacketsPerSecond: 0.034821367203481404\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:54:03][352677531310745][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:54:04][352677531310745][738 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.793/187.793/187.793/0.000 ms\n [2025-09-08 18:54:04][352677531310745][738 ms][DEBUG] check_internet: online [2025-09-08 18:54:04][352677531310745][739 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:54:04][352677531310745][739 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531310745\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5465\"}'\'' -e'"" [2025-09-08 18:54:04][352677531310745][739 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:54:04][352677531310745][739 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531310745\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5465\"}'\'' -e'"" [2025-09-08 18:54:07][352677531310745][4159 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_faf52e96-2173-4d81-a659-e9787127cc70","id":"QR_faf52e96-2173-4d81-a659-e9787127cc70","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:54:07][352677531310745][4315 ms][DEBUG] proc_open done in 3576 ms; code=255; res.len=3343 [2025-09-08 18:54:07][352677531310745][4315 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-08 18:54:07][352677531310745][4316 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:54:10][352677531310745][1 ms][INFO] === Request start === [2025-09-08 18:54:10][352677531310745][1 ms][DEBUG] START check_scloud [2025-09-08 18:54:10][352677531310745][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:54:10][352677531310745][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 20875 4990 23926700 144972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:54:10][352677531310745][290 ms][DEBUG] targetPkg: running [2025-09-08 18:54:10][352677531310745][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 18:54:10][352677531310745][290 ms][DEBUG] START check_boot_completed [2025-09-08 18:54:10][352677531310745][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:54:10][352677531310745][321 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 18:54:10][352677531310745][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:54:10][352677531310745][384 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 18:54:10][352677531310745][384 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 18:54:10][352677531310745][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:54:10][352677531310745][509 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1526\nsuccessfulTxPacketsPerSecond: 0.034821367364427515\nretriedTxPackets: 239\nretriedTxPacketsPerSecond: 0.0348213666240754\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1471\nsuccessfulRxPacketsPerSecond: 0.034821367203481404\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:54:10][352677531310745][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:54:10][352677531310745][883 ms][DEBUG] SU: done in 374 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=234 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 234.625/234.625/234.625/0.000 ms\n [2025-09-08 18:54:10][352677531310745][884 ms][DEBUG] check_internet: online [2025-09-08 18:54:10][352677531310745][884 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:54:10][352677531310745][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531310745\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7113\"}'\'' -e'"" [2025-09-08 18:54:10][352677531310745][884 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:54:10][352677531310745][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531310745\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7113\"}'\'' -e'"" [2025-09-08 18:54:15][352677531310745][5007 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0c6644e-8ce6-4aa2-83b1-edf32b270116","id":"QR_c0c6644e-8ce6-4aa2-83b1-edf32b270116","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:54:15][352677531310745][5164 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-09-08 18:54:15][352677531310745][5164 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-09-08 18:54:15][352677531310745][5164 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:54:19][353600813215910][0 ms][INFO] === Request start === [2025-09-08 18:54:19][353600813215910][1 ms][DEBUG] START check_scloud [2025-09-08 18:54:19][353600813215910][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:54:19][353600813215910][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 20875 4990 23968480 157108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:54:19][353600813215910][321 ms][DEBUG] targetPkg: running [2025-09-08 18:54:19][353600813215910][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-08 18:54:19][353600813215910][321 ms][DEBUG] START check_boot_completed [2025-09-08 18:54:19][353600813215910][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:54:19][353600813215910][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:54:19][353600813215910][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:54:19][353600813215910][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:54:19][353600813215910][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:54:19][353600813215910][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:54:19][353600813215910][524 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1526\nsuccessfulTxPacketsPerSecond: 0.034821367364427515\nretriedTxPackets: 239\nretriedTxPacketsPerSecond: 0.0348213666240754\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1471\nsuccessfulRxPacketsPerSecond: 0.034821367203481404\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:54:19][353600813215910][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:54:20][353600813215910][821 ms][DEBUG] SU: done in 296 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.525/191.525/191.525/0.000 ms\n [2025-09-08 18:54:20][353600813215910][821 ms][DEBUG] check_internet: online [2025-09-08 18:54:20][353600813215910][821 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:54:20][353600813215910][822 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600813215910\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3769\"}'\'' -e'"" [2025-09-08 18:54:20][353600813215910][822 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:54:20][353600813215910][822 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600813215910\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3769\"}'\'' -e'"" [2025-09-08 18:54:24][353600813215910][5304 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4117922a-9c32-463f-9163-f307fb6dbe6c","id":"QR_4117922a-9c32-463f-9163-f307fb6dbe6c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:54:24][353600813215910][5461 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-08 18:54:24][353600813215910][5461 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-08 18:54:24][353600813215910][5461 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:54:27][353600813215910][0 ms][INFO] === Request start === [2025-09-08 18:54:27][353600813215910][1 ms][DEBUG] START check_scloud [2025-09-08 18:54:27][353600813215910][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:54:27][353600813215910][276 ms][DEBUG] SU: done in 276 ms; outu0_a118 20875 4990 24095556 168120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:54:27][353600813215910][276 ms][DEBUG] targetPkg: running [2025-09-08 18:54:27][353600813215910][276 ms][DEBUG] END check_scloud in 276 ms [2025-09-08 18:54:27][353600813215910][277 ms][DEBUG] START check_boot_completed [2025-09-08 18:54:27][353600813215910][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:54:27][353600813215910][323 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 18:54:27][353600813215910][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:54:27][353600813215910][401 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 18:54:27][353600813215910][401 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 18:54:27][353600813215910][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:54:27][353600813215910][526 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1979\nsuccessfulTxPacketsPerSecond: 1.8590030326782365\nretriedTxPackets: 353\nretriedTxPacketsPerSecond: 0.467828577760086\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1839\nsuccessfulRxPacketsPerSecond: 1.51018347908519\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:54:27][353600813215910][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:54:28][353600813215910][839 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.386/202.386/202.386/0.000 ms\n [2025-09-08 18:54:28][353600813215910][839 ms][DEBUG] check_internet: online [2025-09-08 18:54:28][353600813215910][839 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:54:28][353600813215910][839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600813215910\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9189\"}'\'' -e'"" [2025-09-08 18:54:28][353600813215910][839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:54:28][353600813215910][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600813215910\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9189\"}'\'' -e'"" [2025-09-08 18:54:33][353600813215910][5884 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4fbc6f6a-f657-4762-b38f-5fc9028e9228","id":"QR_4fbc6f6a-f657-4762-b38f-5fc9028e9228","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:54:33][353600813215910][6040 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-08 18:54:33][353600813215910][6040 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-08 18:54:33][353600813215910][6041 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:58:03][350386308495000][1 ms][INFO] === Request start === [2025-09-08 18:58:03][350386308495000][1 ms][DEBUG] START check_scloud [2025-09-08 18:58:03][350386308495000][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:58:04][350386308495000][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 20875 4990 24186672 179624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:58:04][350386308495000][309 ms][DEBUG] targetPkg: running [2025-09-08 18:58:04][350386308495000][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 18:58:04][350386308495000][309 ms][DEBUG] START check_boot_completed [2025-09-08 18:58:04][350386308495000][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:58:04][350386308495000][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 18:58:04][350386308495000][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:58:04][350386308495000][388 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 18:58:04][350386308495000][388 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 18:58:04][350386308495000][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:58:04][350386308495000][512 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1979\nsuccessfulTxPacketsPerSecond: 1.8590030326782365\nretriedTxPackets: 353\nretriedTxPacketsPerSecond: 0.467828577760086\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1839\nsuccessfulRxPacketsPerSecond: 1.51018347908519\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:58:04][350386308495000][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:58:05][350386308495000][1981 ms][DEBUG] SU: done in 1468 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.582/201.582/201.582/0.000 ms\n [2025-09-08 18:58:05][350386308495000][1981 ms][DEBUG] check_internet: online [2025-09-08 18:58:05][350386308495000][1981 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:58:05][350386308495000][1981 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386308495000\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2538\"}'\'' -e'"" [2025-09-08 18:58:05][350386308495000][1981 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:58:05][350386308495000][1981 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386308495000\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2538\"}'\'' -e'"" [2025-09-08 18:58:09][350386308495000][5855 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17789798-5b3e-4c2a-8000-6ba38fbde705","id":"QR_17789798-5b3e-4c2a-8000-6ba38fbde705","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:58:09][350386308495000][6011 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-08 18:58:09][350386308495000][6011 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-08 18:58:09][350386308495000][6011 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:58:12][350386308495000][0 ms][INFO] === Request start === [2025-09-08 18:58:12][350386308495000][1 ms][DEBUG] START check_scloud [2025-09-08 18:58:12][350386308495000][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:58:12][350386308495000][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 20875 4990 24339384 190340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:58:12][350386308495000][311 ms][DEBUG] targetPkg: running [2025-09-08 18:58:12][350386308495000][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 18:58:12][350386308495000][311 ms][DEBUG] START check_boot_completed [2025-09-08 18:58:12][350386308495000][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:58:12][350386308495000][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 18:58:12][350386308495000][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:58:12][350386308495000][405 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 18:58:12][350386308495000][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 18:58:12][350386308495000][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:58:12][350386308495000][514 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1979\nsuccessfulTxPacketsPerSecond: 1.8590030326782365\nretriedTxPackets: 353\nretriedTxPacketsPerSecond: 0.467828577760086\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1839\nsuccessfulRxPacketsPerSecond: 1.51018347908519\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:58:12][350386308495000][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:58:13][350386308495000][811 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=188 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 188.570/188.570/188.570/0.000 ms\n [2025-09-08 18:58:13][350386308495000][811 ms][DEBUG] check_internet: online [2025-09-08 18:58:13][350386308495000][811 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:58:13][350386308495000][812 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386308495000\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9090\"}'\'' -e'"" [2025-09-08 18:58:13][350386308495000][812 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:58:13][350386308495000][812 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386308495000\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9090\"}'\'' -e'"" [2025-09-08 18:58:17][350386308495000][5451 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e3dc9fc-9dc0-461c-9ec4-0191a7465465","id":"QR_5e3dc9fc-9dc0-461c-9ec4-0191a7465465","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:58:17][350386308495000][5607 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 18:58:17][350386308495000][5607 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 18:58:17][350386308495000][5607 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:58:21][358615311782448][0 ms][INFO] === Request start === [2025-09-08 18:58:21][358615311782448][1 ms][DEBUG] START check_scloud [2025-09-08 18:58:21][358615311782448][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:58:22][358615311782448][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 20875 4990 24496320 202208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:58:22][358615311782448][318 ms][DEBUG] targetPkg: running [2025-09-08 18:58:22][358615311782448][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 18:58:22][358615311782448][318 ms][DEBUG] START check_boot_completed [2025-09-08 18:58:22][358615311782448][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:58:22][358615311782448][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:58:22][358615311782448][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:58:22][358615311782448][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:58:22][358615311782448][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:58:22][358615311782448][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:58:22][358615311782448][520 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1979\nsuccessfulTxPacketsPerSecond: 1.8590030326782365\nretriedTxPackets: 353\nretriedTxPacketsPerSecond: 0.467828577760086\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1839\nsuccessfulRxPacketsPerSecond: 1.51018347908519\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:58:22][358615311782448][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:58:22][358615311782448][849 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.643/231.643/231.643/0.000 ms\n [2025-09-08 18:58:22][358615311782448][849 ms][DEBUG] check_internet: online [2025-09-08 18:58:22][358615311782448][849 ms][DEBUG] rawBody.length=1150 [2025-09-08 18:58:22][358615311782448][849 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615311782448\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5364\"}'\'' -e'"" [2025-09-08 18:58:22][358615311782448][849 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:58:22][358615311782448][849 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615311782448\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5364\"}'\'' -e'"" [2025-09-08 18:58:26][358615311782448][4207 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_100893e7-2d61-423c-96b6-f7a77e95ff4b","id":"QR_100893e7-2d61-423c-96b6-f7a77e95ff4b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:58:26][358615311782448][4363 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-08 18:58:26][358615311782448][4363 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-09-08 18:58:26][358615311782448][4363 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 18:58:28][358615311782448][0 ms][INFO] === Request start === [2025-09-08 18:58:28][358615311782448][1 ms][DEBUG] START check_scloud [2025-09-08 18:58:28][358615311782448][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 18:58:28][358615311782448][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 20875 4990 24653220 213160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 18:58:28][358615311782448][308 ms][DEBUG] targetPkg: running [2025-09-08 18:58:28][358615311782448][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 18:58:28][358615311782448][308 ms][DEBUG] START check_boot_completed [2025-09-08 18:58:28][358615311782448][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 18:58:29][358615311782448][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 18:58:29][358615311782448][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 18:58:29][358615311782448][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 18:58:29][358615311782448][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 18:58:29][358615311782448][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 18:58:29][358615311782448][511 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1979\nsuccessfulTxPacketsPerSecond: 1.8590030326782365\nretriedTxPackets: 353\nretriedTxPacketsPerSecond: 0.467828577760086\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1839\nsuccessfulRxPacketsPerSecond: 1.51018347908519\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 18:58:29][358615311782448][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 18:58:29][358615311782448][839 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=211 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 211.449/211.449/211.449/0.000 ms\n [2025-09-08 18:58:29][358615311782448][839 ms][DEBUG] check_internet: online [2025-09-08 18:58:29][358615311782448][839 ms][DEBUG] rawBody.length=1160 [2025-09-08 18:58:29][358615311782448][839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615311782448\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3119\"}'\'' -e'"" [2025-09-08 18:58:29][358615311782448][839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 18:58:29][358615311782448][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615311782448\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3119\"}'\'' -e'"" [2025-09-08 18:58:34][358615311782448][5385 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cca5ab54-3785-4ca9-94b5-142ca8ebe91e","id":"QR_cca5ab54-3785-4ca9-94b5-142ca8ebe91e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 18:58:34][358615311782448][5541 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-08 18:58:34][358615311782448][5541 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-08 18:58:34][358615311782448][5541 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:01:04][355824552165965][1 ms][INFO] === Request start === [2025-09-08 19:01:04][355824552165965][1 ms][DEBUG] START check_scloud [2025-09-08 19:01:04][355824552165965][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:01:05][355824552165965][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 20875 4990 24748608 224520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:01:05][355824552165965][310 ms][DEBUG] targetPkg: running [2025-09-08 19:01:05][355824552165965][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 19:01:05][355824552165965][310 ms][DEBUG] START check_boot_completed [2025-09-08 19:01:05][355824552165965][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:01:05][355824552165965][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:01:05][355824552165965][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:01:05][355824552165965][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:01:05][355824552165965][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:01:05][355824552165965][388 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:01:05][355824552165965][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824552165965\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4102\"}'\'' -e'"" [2025-09-08 19:01:05][355824552165965][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:01:05][355824552165965][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824552165965\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4102\"}'\'' -e'"" [2025-09-08 19:01:10][355824552165965][5965 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e63ce8fd-e7e5-4075-9d60-7ea7fd48e234","id":"QR_e63ce8fd-e7e5-4075-9d60-7ea7fd48e234","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:01:10][355824552165965][6121 ms][DEBUG] proc_open done in 5733 ms; code=255; res.len=3343 [2025-09-08 19:01:10][355824552165965][6121 ms][DEBUG] END runCmdUntilRes#1 in 5733 ms [2025-09-08 19:01:10][355824552165965][6121 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:01:15][351317841413357][0 ms][INFO] === Request start === [2025-09-08 19:01:15][351317841413357][1 ms][DEBUG] START check_scloud [2025-09-08 19:01:15][351317841413357][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:01:15][351317841413357][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 20875 4990 24885064 236356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:01:15][351317841413357][307 ms][DEBUG] targetPkg: running [2025-09-08 19:01:15][351317841413357][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 19:01:15][351317841413357][307 ms][DEBUG] START check_boot_completed [2025-09-08 19:01:15][351317841413357][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:01:15][351317841413357][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:01:15][351317841413357][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:01:15][351317841413357][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:01:15][351317841413357][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 19:01:15][351317841413357][401 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:01:15][351317841413357][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317841413357\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4190\"}'\'' -e'"" [2025-09-08 19:01:15][351317841413357][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:01:15][351317841413357][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317841413357\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4190\"}'\'' -e'"" [2025-09-08 19:01:19][351317841413357][3947 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0fce76a-27a8-4465-8694-46f58451d977","id":"QR_b0fce76a-27a8-4465-8694-46f58451d977","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:01:19][351317841413357][4103 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-08 19:01:19][351317841413357][4103 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-08 19:01:19][351317841413357][4103 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:01:22][351317841413357][0 ms][INFO] === Request start === [2025-09-08 19:01:22][351317841413357][1 ms][DEBUG] START check_scloud [2025-09-08 19:01:22][351317841413357][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:01:22][351317841413357][259 ms][DEBUG] SU: done in 259 ms; outu0_a118 20875 4990 25052112 248120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:01:22][351317841413357][260 ms][DEBUG] targetPkg: running [2025-09-08 19:01:22][351317841413357][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-08 19:01:22][351317841413357][260 ms][DEBUG] START check_boot_completed [2025-09-08 19:01:22][351317841413357][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:01:22][351317841413357][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:01:22][351317841413357][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:01:22][351317841413357][354 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 19:01:22][351317841413357][354 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 19:01:22][351317841413357][354 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:01:22][351317841413357][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317841413357\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9864\"}'\'' -e'"" [2025-09-08 19:01:22][351317841413357][354 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:01:22][351317841413357][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317841413357\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9864\"}'\'' -e'"" [2025-09-08 19:01:26][351317841413357][4024 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 19:01:26][351317841413357][4024 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-08 19:01:26][351317841413357][4025 ms][WARN] Detected error: Process with pid 20875 either refused to load frida-agent, or terminated during injectionProcess with pid 20875 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 19:01:26][351317841413357][4025 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 19:01:26][351317841413357][4321 ms][DEBUG] SU: done in 296 ms; outsystem 5411 4990 12932832 218512 ep_poll 0 S system_server\n [2025-09-08 19:01:26][351317841413357][4321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 19:01:26][351317841413357][4462 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 19:01:26][351317841413357][4462 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 19:01:26][351317841413357][4462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 19:01:26][351317841413357][4587 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 19:01:26][351317841413357][4587 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 19:01:26][351317841413357][4743 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 19:01:28][351317841413357][6758 ms][DEBUG] START check_boot_completed [2025-09-08 19:01:28][351317841413357][6758 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:01:28][351317841413357][6805 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:01:28][351317841413357][6805 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:01:29][351317841413357][6867 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 19:01:29][351317841413357][6867 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 19:01:32][351317841413357][9882 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 19:01:32][351317841413357][9882 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317841413357\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9864\"}'\'' -e'"" [2025-09-08 19:01:36][351317841413357][14568 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_575c3a4d-cd7b-4f63-b7f5-c625baaf78c8","id":"QR_575c3a4d-cd7b-4f63-b7f5-c625baaf78c8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:01:36][351317841413357][14725 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-08 19:01:36][351317841413357][14725 ms][DEBUG] END runCmdUntilRes#2 in 4843 ms [2025-09-08 19:01:36][351317841413357][14725 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:02:31][350455580830182][0 ms][INFO] === Request start === [2025-09-08 19:02:31][350455580830182][1 ms][DEBUG] START check_scloud [2025-09-08 19:02:31][350455580830182][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:02:31][350455580830182][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 22344 4990 23731156 134352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:02:31][350455580830182][308 ms][DEBUG] targetPkg: running [2025-09-08 19:02:31][350455580830182][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-08 19:02:31][350455580830182][308 ms][DEBUG] START check_boot_completed [2025-09-08 19:02:31][350455580830182][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:02:31][350455580830182][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:02:31][350455580830182][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:02:31][350455580830182][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:02:31][350455580830182][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:02:31][350455580830182][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:02:31][350455580830182][496 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2265\nsuccessfulTxPacketsPerSecond: 0.8253983444183932\nretriedTxPackets: 428\nretriedTxPacketsPerSecond: 0.1794344226996507\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2083\nsuccessfulRxPacketsPerSecond: 0.7057753959519594\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:02:31][350455580830182][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:02:33][350455580830182][2167 ms][DEBUG] SU: done in 1671 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.103/204.103/204.103/0.000 ms\n [2025-09-08 19:02:33][350455580830182][2167 ms][DEBUG] check_internet: online [2025-09-08 19:02:33][350455580830182][2167 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:02:33][350455580830182][2167 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580830182\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9486\"}'\'' -e'"" [2025-09-08 19:02:33][350455580830182][2167 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:02:33][350455580830182][2167 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580830182\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9486\"}'\'' -e'"" [2025-09-08 19:02:37][350455580830182][6072 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-08 19:02:37][350455580830182][6229 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=107 [2025-09-08 19:02:37][350455580830182][6229 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-08 19:02:37][350455580830182][6229 ms][INFO] SUCCESS response from frida (len=107) [2025-09-08 19:02:37][][0 ms][INFO] === Request start === [2025-09-08 19:02:37][][1 ms][DEBUG] START check_scloud [2025-09-08 19:02:37][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:02:38][][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 22344 4990 23858844 145108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:02:38][][310 ms][DEBUG] targetPkg: running [2025-09-08 19:02:38][][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 19:02:38][][310 ms][DEBUG] START check_boot_completed [2025-09-08 19:02:38][][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:02:38][][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:02:38][][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:02:38][][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:02:38][][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 19:02:38][][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:02:38][][513 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2265\nsuccessfulTxPacketsPerSecond: 0.8253983444183932\nretriedTxPackets: 428\nretriedTxPacketsPerSecond: 0.1794344226996507\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2083\nsuccessfulRxPacketsPerSecond: 0.7057753959519594\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:02:38][][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:02:38][][794 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.186/164.186/164.186/0.000 ms\n [2025-09-08 19:02:38][][795 ms][DEBUG] check_internet: online [2025-09-08 19:02:38][][795 ms][DEBUG] rawBody.length=1141 [2025-09-08 19:02:38][][795 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58Y50QGL4X\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5878\"}'\'' -e'"" [2025-09-08 19:02:38][][795 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:02:38][][795 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58Y50QGL4X\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5878\"}'\'' -e'"" [2025-09-08 19:02:42][][4934 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-08 19:02:42][][5090 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=95 [2025-09-08 19:02:42][][5090 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-09-08 19:02:42][][5090 ms][INFO] SUCCESS response from frida (len=95) [2025-09-08 19:02:43][350455580830182][0 ms][INFO] === Request start === [2025-09-08 19:02:43][350455580830182][1 ms][DEBUG] START check_scloud [2025-09-08 19:02:43][350455580830182][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:02:43][350455580830182][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 22344 4990 24020892 156784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:02:43][350455580830182][302 ms][DEBUG] targetPkg: running [2025-09-08 19:02:43][350455580830182][302 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 19:02:43][350455580830182][302 ms][DEBUG] START check_boot_completed [2025-09-08 19:02:43][350455580830182][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:02:43][350455580830182][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:02:43][350455580830182][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:02:43][350455580830182][382 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 19:02:43][350455580830182][382 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-08 19:02:43][350455580830182][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:02:43][350455580830182][490 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2265\nsuccessfulTxPacketsPerSecond: 0.8253983444183932\nretriedTxPackets: 428\nretriedTxPacketsPerSecond: 0.1794344226996507\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2083\nsuccessfulRxPacketsPerSecond: 0.7057753959519594\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:02:43][350455580830182][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:02:44][350455580830182][865 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=268 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 268.154/268.154/268.154/0.000 ms\n [2025-09-08 19:02:44][350455580830182][865 ms][DEBUG] check_internet: online [2025-09-08 19:02:44][350455580830182][865 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:02:44][350455580830182][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580830182\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2683\"}'\'' -e'"" [2025-09-08 19:02:44][350455580830182][865 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:02:44][350455580830182][865 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580830182\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2683\"}'\'' -e'"" [2025-09-08 19:02:48][350455580830182][5504 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab01f034-2a43-40ce-8cb4-9c4a8dd0a439","id":"QR_ab01f034-2a43-40ce-8cb4-9c4a8dd0a439","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:02:48][350455580830182][5661 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 19:02:48][350455580830182][5661 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 19:02:48][350455580830182][5661 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:07:05][351331722159799][1 ms][INFO] === Request start === [2025-09-08 19:07:05][351331722159799][1 ms][DEBUG] START check_scloud [2025-09-08 19:07:05][351331722159799][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:07:05][351331722159799][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 22344 4990 24114120 168184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:07:05][351331722159799][324 ms][DEBUG] targetPkg: running [2025-09-08 19:07:05][351331722159799][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-08 19:07:05][351331722159799][324 ms][DEBUG] START check_boot_completed [2025-09-08 19:07:05][351331722159799][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:07:05][351331722159799][355 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:07:05][351331722159799][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:07:05][351331722159799][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:07:05][351331722159799][402 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:07:05][351331722159799][402 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:07:05][351331722159799][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351331722159799\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8879\"}'\'' -e'"" [2025-09-08 19:07:05][351331722159799][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:07:05][351331722159799][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351331722159799\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8879\"}'\'' -e'"" [2025-09-08 19:07:11][351331722159799][6119 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4bce7975-9c72-4d43-a5de-a9ed67515e87","id":"QR_4bce7975-9c72-4d43-a5de-a9ed67515e87","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:07:11][351331722159799][6276 ms][DEBUG] proc_open done in 5873 ms; code=255; res.len=3343 [2025-09-08 19:07:11][351331722159799][6276 ms][DEBUG] END runCmdUntilRes#1 in 5873 ms [2025-09-08 19:07:11][351331722159799][6276 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:07:14][351331722159799][0 ms][INFO] === Request start === [2025-09-08 19:07:14][351331722159799][1 ms][DEBUG] START check_scloud [2025-09-08 19:07:14][351331722159799][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:07:15][351331722159799][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 22344 4990 24271056 180028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:07:15][351331722159799][304 ms][DEBUG] targetPkg: running [2025-09-08 19:07:15][351331722159799][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 19:07:15][351331722159799][304 ms][DEBUG] START check_boot_completed [2025-09-08 19:07:15][351331722159799][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:07:15][351331722159799][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:07:15][351331722159799][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:07:15][351331722159799][444 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 19:07:15][351331722159799][444 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 19:07:15][351331722159799][444 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:07:15][351331722159799][444 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351331722159799\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5907\"}'\'' -e'"" [2025-09-08 19:07:15][351331722159799][444 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:07:15][351331722159799][444 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351331722159799\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5907\"}'\'' -e'"" [2025-09-08 19:07:19][351331722159799][4349 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a6cf866e-f38b-46c9-b674-a7d9b42a72de","id":"QR_a6cf866e-f38b-46c9-b674-a7d9b42a72de","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:07:19][351331722159799][4505 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-08 19:07:19][351331722159799][4505 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-08 19:07:19][351331722159799][4506 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:08:04][350481565461215][0 ms][INFO] === Request start === [2025-09-08 19:08:04][350481565461215][1 ms][DEBUG] START check_scloud [2025-09-08 19:08:04][350481565461215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:08:04][350481565461215][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 22344 4990 24370452 191180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:08:04][350481565461215][308 ms][DEBUG] targetPkg: running [2025-09-08 19:08:04][350481565461215][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 19:08:04][350481565461215][308 ms][DEBUG] START check_boot_completed [2025-09-08 19:08:04][350481565461215][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:08:04][350481565461215][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:08:04][350481565461215][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:08:04][350481565461215][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 19:08:04][350481565461215][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 19:08:04][350481565461215][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:08:05][350481565461215][526 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2404\nsuccessfulTxPacketsPerSecond: 0.45614449607518837\nretriedTxPackets: 468\nretriedTxPacketsPerSecond: 0.13126460318710456\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2205\nsuccessfulRxPacketsPerSecond: 0.40035703972066894\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:08:05][350481565461215][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:08:06][350481565461215][1791 ms][DEBUG] SU: done in 1265 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.970/187.970/187.970/0.000 ms\n [2025-09-08 19:08:06][350481565461215][1792 ms][DEBUG] check_internet: online [2025-09-08 19:08:06][350481565461215][1792 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:08:06][350481565461215][1792 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481565461215\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"UPO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2599\"}'\'' -e'"" [2025-09-08 19:08:06][350481565461215][1792 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:08:06][350481565461215][1792 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481565461215\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"UPO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2599\"}'\'' -e'"" [2025-09-08 19:08:10][350481565461215][6041 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc31497f-d9dc-4b48-bcd0-c6daf28de881","id":"QR_bc31497f-d9dc-4b48-bcd0-c6daf28de881","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:08:10][350481565461215][6197 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-09-08 19:08:10][350481565461215][6197 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-09-08 19:08:10][350481565461215][6197 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:08:14][350481565461215][0 ms][INFO] === Request start === [2025-09-08 19:08:14][350481565461215][1 ms][DEBUG] START check_scloud [2025-09-08 19:08:14][350481565461215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:08:14][350481565461215][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 22344 4990 24539548 202932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:08:14][350481565461215][317 ms][DEBUG] targetPkg: running [2025-09-08 19:08:14][350481565461215][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 19:08:14][350481565461215][317 ms][DEBUG] START check_boot_completed [2025-09-08 19:08:14][350481565461215][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:08:14][350481565461215][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:08:14][350481565461215][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:08:14][350481565461215][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:08:14][350481565461215][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 19:08:14][350481565461215][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:08:14][350481565461215][537 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2404\nsuccessfulTxPacketsPerSecond: 0.45614449607518837\nretriedTxPackets: 468\nretriedTxPacketsPerSecond: 0.13126460318710456\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2205\nsuccessfulRxPacketsPerSecond: 0.40035703972066894\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:08:14][350481565461215][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:08:15][350481565461215][895 ms][DEBUG] SU: done in 358 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=233 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 233.191/233.191/233.191/0.000 ms\n [2025-09-08 19:08:15][350481565461215][895 ms][DEBUG] check_internet: online [2025-09-08 19:08:15][350481565461215][895 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:08:15][350481565461215][895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481565461215\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"UPO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1359\"}'\'' -e'"" [2025-09-08 19:08:15][350481565461215][895 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:08:15][350481565461215][896 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481565461215\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"UPO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1359\"}'\'' -e'"" [2025-09-08 19:08:18][350481565461215][4378 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7c5b8bb-3e3b-46a6-bed7-65af0d2d3083","id":"QR_b7c5b8bb-3e3b-46a6-bed7-65af0d2d3083","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:08:18][350481565461215][4535 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-09-08 19:08:18][350481565461215][4535 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-09-08 19:08:18][350481565461215][4535 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:12:03][351632894807903][1 ms][INFO] === Request start === [2025-09-08 19:12:03][351632894807903][1 ms][DEBUG] START check_scloud [2025-09-08 19:12:03][351632894807903][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:12:03][351632894807903][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 22344 4990 24703544 140484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:12:03][351632894807903][328 ms][DEBUG] targetPkg: running [2025-09-08 19:12:03][351632894807903][328 ms][DEBUG] END check_scloud in 327 ms [2025-09-08 19:12:03][351632894807903][328 ms][DEBUG] START check_boot_completed [2025-09-08 19:12:03][351632894807903][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:12:03][351632894807903][359 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:12:03][351632894807903][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:12:03][351632894807903][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:12:03][351632894807903][406 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:12:03][351632894807903][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:12:03][351632894807903][500 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2483\nsuccessfulTxPacketsPerSecond: 0.5162049137480397\nretriedTxPackets: 500\nretriedTxPacketsPerSecond: 0.20909566126502874\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2270\nsuccessfulRxPacketsPerSecond: 0.42472556194458966\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:12:03][351632894807903][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:12:04][351632894807903][797 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.320/187.320/187.320/0.000 ms\n [2025-09-08 19:12:04][351632894807903][797 ms][DEBUG] check_internet: online [2025-09-08 19:12:04][351632894807903][797 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:12:04][351632894807903][797 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632894807903\",\"model\":\"SM-A325N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9218\"}'\'' -e'"" [2025-09-08 19:12:04][351632894807903][797 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:12:04][351632894807903][797 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632894807903\",\"model\":\"SM-A325N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9218\"}'\'' -e'"" [2025-09-08 19:12:08][351632894807903][5311 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f911357-2cb7-4fff-ad09-201c9e8f001d","id":"QR_0f911357-2cb7-4fff-ad09-201c9e8f001d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:12:08][351632894807903][5468 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-09-08 19:12:08][351632894807903][5468 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-09-08 19:12:08][351632894807903][5468 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:12:11][351632894807903][0 ms][INFO] === Request start === [2025-09-08 19:12:11][351632894807903][1 ms][DEBUG] START check_scloud [2025-09-08 19:12:11][351632894807903][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:12:11][351632894807903][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 22344 4990 24862528 146936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:12:11][351632894807903][271 ms][DEBUG] targetPkg: running [2025-09-08 19:12:11][351632894807903][271 ms][DEBUG] END check_scloud in 270 ms [2025-09-08 19:12:11][351632894807903][271 ms][DEBUG] START check_boot_completed [2025-09-08 19:12:11][351632894807903][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:12:11][351632894807903][302 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:12:11][351632894807903][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:12:11][351632894807903][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:12:11][351632894807903][349 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:12:11][351632894807903][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:12:11][351632894807903][474 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2483\nsuccessfulTxPacketsPerSecond: 0.5162049137480397\nretriedTxPackets: 500\nretriedTxPacketsPerSecond: 0.20909566126502874\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2270\nsuccessfulRxPacketsPerSecond: 0.42472556194458966\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:12:11][351632894807903][474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:12:11][351632894807903][740 ms][DEBUG] SU: done in 265 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.443/164.443/164.443/0.000 ms\n [2025-09-08 19:12:11][351632894807903][740 ms][DEBUG] check_internet: online [2025-09-08 19:12:11][351632894807903][740 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:12:11][351632894807903][740 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632894807903\",\"model\":\"SM-A325N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2715\"}'\'' -e'"" [2025-09-08 19:12:11][351632894807903][740 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:12:11][351632894807903][740 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632894807903\",\"model\":\"SM-A325N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2715\"}'\'' -e'"" [2025-09-08 19:12:16][351632894807903][5722 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68aa4fd8-b261-4583-9dd0-988a2208b2ad","id":"QR_68aa4fd8-b261-4583-9dd0-988a2208b2ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:12:17][351632894807903][5879 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-08 19:12:17][351632894807903][5879 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-09-08 19:12:17][351632894807903][5879 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:16:04][354173245966186][1 ms][INFO] === Request start === [2025-09-08 19:16:04][354173245966186][1 ms][DEBUG] START check_scloud [2025-09-08 19:16:04][354173245966186][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:16:05][354173245966186][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 22344 4990 25003008 160416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:16:05][354173245966186][315 ms][DEBUG] targetPkg: running [2025-09-08 19:16:05][354173245966186][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 19:16:05][354173245966186][316 ms][DEBUG] START check_boot_completed [2025-09-08 19:16:05][354173245966186][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:16:05][354173245966186][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:16:05][354173245966186][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:16:05][354173245966186][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:16:05][354173245966186][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 19:16:05][354173245966186][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:16:05][354173245966186][518 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2612\nsuccessfulTxPacketsPerSecond: 0.417743408397614\nretriedTxPackets: 544\nretriedTxPacketsPerSecond: 0.142486123794535\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2379\nsuccessfulRxPacketsPerSecond: 0.35297698849100717\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:16:05][354173245966186][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:16:06][354173245966186][1815 ms][DEBUG] SU: done in 1296 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.103/198.103/198.103/0.000 ms\n [2025-09-08 19:16:06][354173245966186][1815 ms][DEBUG] check_internet: online [2025-09-08 19:16:06][354173245966186][1815 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:16:06][354173245966186][1815 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354173245966186\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9191\"}'\'' -e'"" [2025-09-08 19:16:06][354173245966186][1815 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:16:06][354173245966186][1815 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354173245966186\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9191\"}'\'' -e'"" [2025-09-08 19:16:13][354173245966186][8391 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_82c47b81-6ab2-45e3-9b7b-c2c95d8c3a39","id":"QR_82c47b81-6ab2-45e3-9b7b-c2c95d8c3a39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:16:13][354173245966186][8548 ms][DEBUG] proc_open done in 6733 ms; code=255; res.len=3343 [2025-09-08 19:16:13][354173245966186][8548 ms][DEBUG] END runCmdUntilRes#1 in 6733 ms [2025-09-08 19:16:13][354173245966186][8548 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:16:17][354173245966186][0 ms][INFO] === Request start === [2025-09-08 19:16:17][354173245966186][1 ms][DEBUG] START check_scloud [2025-09-08 19:16:17][354173245966186][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:16:17][354173245966186][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 22344 4990 25165064 171408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:16:17][354173245966186][287 ms][DEBUG] targetPkg: running [2025-09-08 19:16:17][354173245966186][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-08 19:16:17][354173245966186][287 ms][DEBUG] START check_boot_completed [2025-09-08 19:16:17][354173245966186][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:16:17][354173245966186][334 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:16:17][354173245966186][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:16:17][354173245966186][396 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 19:16:17][354173245966186][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 19:16:17][354173245966186][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:16:17][354173245966186][537 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2612\nsuccessfulTxPacketsPerSecond: 0.417743408397614\nretriedTxPackets: 544\nretriedTxPacketsPerSecond: 0.142486123794535\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2379\nsuccessfulRxPacketsPerSecond: 0.35297698849100717\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:16:17][354173245966186][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:16:17][354173245966186][912 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=275 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 275.567/275.567/275.567/0.000 ms\n [2025-09-08 19:16:17][354173245966186][912 ms][DEBUG] check_internet: online [2025-09-08 19:16:17][354173245966186][912 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:16:17][354173245966186][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354173245966186\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6653\"}'\'' -e'"" [2025-09-08 19:16:17][354173245966186][913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:16:17][354173245966186][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354173245966186\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6653\"}'\'' -e'"" [2025-09-08 19:16:22][354173245966186][5020 ms][DEBUG] proc_open done in 4108 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 19:16:22][354173245966186][5020 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-08 19:16:22][354173245966186][5020 ms][WARN] Detected error: Process with pid 22344 either refused to load frida-agent, or terminated during injectionProcess with pid 22344 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 19:16:22][354173245966186][5020 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 19:16:22][354173245966186][5270 ms][DEBUG] SU: done in 250 ms; outsystem 5411 4990 12984052 207176 ep_poll 0 S system_server\n [2025-09-08 19:16:22][354173245966186][5270 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 19:16:22][354173245966186][5411 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 19:16:22][354173245966186][5411 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 19:16:22][354173245966186][5411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 19:16:22][354173245966186][5536 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 19:16:22][354173245966186][5536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 19:16:22][354173245966186][5755 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 19:16:24][354173245966186][7769 ms][DEBUG] START check_boot_completed [2025-09-08 19:16:24][354173245966186][7770 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:16:24][354173245966186][7816 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:16:24][354173245966186][7816 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:16:24][354173245966186][7863 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:16:24][354173245966186][7863 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 19:16:27][354173245966186][10878 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 19:16:27][354173245966186][10878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354173245966186\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6653\"}'\'' -e'"" [2025-09-08 19:16:32][354173245966186][15346 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd4f3df1-80bd-4667-b050-d3856f7cd2cf","id":"QR_bd4f3df1-80bd-4667-b050-d3856f7cd2cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:16:32][354173245966186][15502 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-09-08 19:16:32][354173245966186][15502 ms][DEBUG] END runCmdUntilRes#2 in 4624 ms [2025-09-08 19:16:32][354173245966186][15502 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:19:05][352334111101025][1 ms][INFO] === Request start === [2025-09-08 19:19:05][352334111101025][1 ms][DEBUG] START check_scloud [2025-09-08 19:19:05][352334111101025][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:19:05][352334111101025][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 25548 4990 23708008 133720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:19:05][352334111101025][302 ms][DEBUG] targetPkg: running [2025-09-08 19:19:05][352334111101025][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 19:19:05][352334111101025][302 ms][DEBUG] START check_boot_completed [2025-09-08 19:19:05][352334111101025][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:19:05][352334111101025][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:19:05][352334111101025][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:19:05][352334111101025][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:19:05][352334111101025][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:19:05][352334111101025][381 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:19:05][352334111101025][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334111101025\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3478\"}'\'' -e'"" [2025-09-08 19:19:05][352334111101025][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:19:05][352334111101025][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334111101025\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3478\"}'\'' -e'"" [2025-09-08 19:19:11][352334111101025][6223 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f03f9c6b-f524-4bd9-af17-73fbd1da5b85","id":"QR_f03f9c6b-f524-4bd9-af17-73fbd1da5b85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:19:11][352334111101025][6379 ms][DEBUG] proc_open done in 5998 ms; code=255; res.len=3343 [2025-09-08 19:19:11][352334111101025][6379 ms][DEBUG] END runCmdUntilRes#1 in 5998 ms [2025-09-08 19:19:11][352334111101025][6379 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:19:15][352334111101025][0 ms][INFO] === Request start === [2025-09-08 19:19:15][352334111101025][1 ms][DEBUG] START check_scloud [2025-09-08 19:19:15][352334111101025][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:19:15][352334111101025][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 25548 4990 23860720 144776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:19:15][352334111101025][304 ms][DEBUG] targetPkg: running [2025-09-08 19:19:15][352334111101025][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 19:19:15][352334111101025][304 ms][DEBUG] START check_boot_completed [2025-09-08 19:19:15][352334111101025][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:19:15][352334111101025][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:19:15][352334111101025][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:19:15][352334111101025][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:19:15][352334111101025][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 19:19:15][352334111101025][398 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:19:15][352334111101025][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334111101025\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1528\"}'\'' -e'"" [2025-09-08 19:19:15][352334111101025][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:19:15][352334111101025][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334111101025\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1528\"}'\'' -e'"" [2025-09-08 19:19:19][352334111101025][4381 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4675d1e6-6a2f-4a4e-bafe-757aeda3989f","id":"QR_4675d1e6-6a2f-4a4e-bafe-757aeda3989f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:19:19][352334111101025][4537 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-09-08 19:19:19][352334111101025][4537 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-09-08 19:19:19][352334111101025][4537 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:22:05][354291427047078][0 ms][INFO] === Request start === [2025-09-08 19:22:05][354291427047078][0 ms][DEBUG] START check_scloud [2025-09-08 19:22:05][354291427047078][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:22:05][354291427047078][251 ms][DEBUG] SU: done in 251 ms; outu0_a118 25548 4990 23975500 156608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:22:05][354291427047078][251 ms][DEBUG] targetPkg: running [2025-09-08 19:22:05][354291427047078][251 ms][DEBUG] END check_scloud in 251 ms [2025-09-08 19:22:05][354291427047078][251 ms][DEBUG] START check_boot_completed [2025-09-08 19:22:05][354291427047078][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:22:05][354291427047078][282 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:22:05][354291427047078][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:22:05][354291427047078][329 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:22:05][354291427047078][329 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:22:05][354291427047078][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:22:05][354291427047078][438 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2782\nsuccessfulTxPacketsPerSecond: 0.5644184000398413\nretriedTxPackets: 593\nretriedTxPacketsPerSecond: 0.16268530354089544\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2525\nsuccessfulRxPacketsPerSecond: 0.4847358023871578\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:22:05][354291427047078][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:22:07][354291427047078][1907 ms][DEBUG] SU: done in 1468 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.836/202.836/202.836/0.000 ms\n [2025-09-08 19:22:07][354291427047078][1907 ms][DEBUG] check_internet: online [2025-09-08 19:22:07][354291427047078][1907 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:22:07][354291427047078][1907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291427047078\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8122\"}'\'' -e'"" [2025-09-08 19:22:07][354291427047078][1907 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:22:07][354291427047078][1907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291427047078\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8122\"}'\'' -e'"" [2025-09-08 19:22:11][354291427047078][6859 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_edc3a484-a5cb-4591-a808-ad679500c727","id":"QR_edc3a484-a5cb-4591-a808-ad679500c727","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:22:12][354291427047078][7015 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-08 19:22:12][354291427047078][7015 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-08 19:22:12][354291427047078][7015 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:22:15][354291427047078][0 ms][INFO] === Request start === [2025-09-08 19:22:15][354291427047078][1 ms][DEBUG] START check_scloud [2025-09-08 19:22:15][354291427047078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:22:16][354291427047078][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 25548 4990 24146708 167588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:22:16][354291427047078][302 ms][DEBUG] targetPkg: running [2025-09-08 19:22:16][354291427047078][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 19:22:16][354291427047078][302 ms][DEBUG] START check_boot_completed [2025-09-08 19:22:16][354291427047078][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:22:16][354291427047078][349 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:22:16][354291427047078][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:22:16][354291427047078][411 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 19:22:16][354291427047078][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 19:22:16][354291427047078][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:22:16][354291427047078][520 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2782\nsuccessfulTxPacketsPerSecond: 0.5644184000398413\nretriedTxPackets: 593\nretriedTxPacketsPerSecond: 0.16268530354089544\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2525\nsuccessfulRxPacketsPerSecond: 0.4847358023871578\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:22:16][354291427047078][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:22:16][354291427047078][833 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.297/220.297/220.297/0.000 ms\n [2025-09-08 19:22:16][354291427047078][833 ms][DEBUG] check_internet: online [2025-09-08 19:22:16][354291427047078][833 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:22:16][354291427047078][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291427047078\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8657\"}'\'' -e'"" [2025-09-08 19:22:16][354291427047078][833 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:22:16][354291427047078][833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291427047078\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8657\"}'\'' -e'"" [2025-09-08 19:22:20][354291427047078][4317 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_615b84e8-2627-4390-aa6d-7f0b04b9d5f0","id":"QR_615b84e8-2627-4390-aa6d-7f0b04b9d5f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:22:20][354291427047078][4473 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=3343 [2025-09-08 19:22:20][354291427047078][4473 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-09-08 19:22:20][354291427047078][4473 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:25:03][352469856992400][1 ms][INFO] === Request start === [2025-09-08 19:25:03][352469856992400][1 ms][DEBUG] START check_scloud [2025-09-08 19:25:03][352469856992400][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:25:04][352469856992400][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 25548 4990 24235988 178880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:25:04][352469856992400][305 ms][DEBUG] targetPkg: running [2025-09-08 19:25:04][352469856992400][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-08 19:25:04][352469856992400][305 ms][DEBUG] START check_boot_completed [2025-09-08 19:25:04][352469856992400][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:25:04][352469856992400][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:25:04][352469856992400][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:25:04][352469856992400][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:25:04][352469856992400][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:25:04][352469856992400][383 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:25:04][352469856992400][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469856992400\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2552\"}'\'' -e'"" [2025-09-08 19:25:04][352469856992400][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:25:04][352469856992400][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469856992400\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2552\"}'\'' -e'"" [2025-09-08 19:25:08][352469856992400][4913 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8970d78f-1f1a-40d4-8b75-a19a71c7e076","id":"QR_8970d78f-1f1a-40d4-8b75-a19a71c7e076","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:25:08][352469856992400][5069 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-08 19:25:08][352469856992400][5069 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-08 19:25:08][352469856992400][5069 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:25:11][352469856992400][0 ms][INFO] === Request start === [2025-09-08 19:25:11][352469856992400][1 ms][DEBUG] START check_scloud [2025-09-08 19:25:11][352469856992400][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:25:11][352469856992400][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 25548 4990 24390748 190620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:25:11][352469856992400][318 ms][DEBUG] targetPkg: running [2025-09-08 19:25:11][352469856992400][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 19:25:11][352469856992400][318 ms][DEBUG] START check_boot_completed [2025-09-08 19:25:11][352469856992400][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:25:11][352469856992400][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:25:11][352469856992400][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:25:11][352469856992400][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:25:11][352469856992400][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:25:11][352469856992400][396 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:25:11][352469856992400][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469856992400\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1972\"}'\'' -e'"" [2025-09-08 19:25:11][352469856992400][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:25:11][352469856992400][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469856992400\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1972\"}'\'' -e'"" [2025-09-08 19:25:17][352469856992400][5895 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e00f9fab-833e-48c9-a230-1d379e57fe46","id":"QR_e00f9fab-833e-48c9-a230-1d379e57fe46","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:25:17][352469856992400][6051 ms][DEBUG] proc_open done in 5654 ms; code=255; res.len=3343 [2025-09-08 19:25:17][352469856992400][6051 ms][DEBUG] END runCmdUntilRes#1 in 5654 ms [2025-09-08 19:25:17][352469856992400][6051 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:28:03][358453421335257][1 ms][INFO] === Request start === [2025-09-08 19:28:03][358453421335257][1 ms][DEBUG] START check_scloud [2025-09-08 19:28:03][358453421335257][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:28:04][358453421335257][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 25548 4990 24494364 202164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:28:04][358453421335257][298 ms][DEBUG] targetPkg: running [2025-09-08 19:28:04][358453421335257][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-08 19:28:04][358453421335257][298 ms][DEBUG] START check_boot_completed [2025-09-08 19:28:04][358453421335257][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:28:04][358453421335257][329 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:28:04][358453421335257][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:28:04][358453421335257][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:28:04][358453421335257][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:28:04][358453421335257][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:28:04][358453421335257][501 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2856\nsuccessfulTxPacketsPerSecond: 0.2457296177244109\nretriedTxPackets: 620\nretriedTxPacketsPerSecond: 0.08965810376431209\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2588\nsuccessfulRxPacketsPerSecond: 0.20920224211672822\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:28:04][358453421335257][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:28:05][358453421335257][2079 ms][DEBUG] SU: done in 1577 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.193/199.193/199.193/0.000 ms\n [2025-09-08 19:28:05][358453421335257][2079 ms][DEBUG] check_internet: online [2025-09-08 19:28:05][358453421335257][2079 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:28:05][358453421335257][2079 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453421335257\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6305\"}'\'' -e'"" [2025-09-08 19:28:05][358453421335257][2079 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:28:05][358453421335257][2079 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453421335257\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6305\"}'\'' -e'"" [2025-09-08 19:28:10][358453421335257][7203 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_908fe4ed-d20d-42bc-8a57-0d46c1bb6ebe","id":"QR_908fe4ed-d20d-42bc-8a57-0d46c1bb6ebe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:28:11][358453421335257][7359 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-09-08 19:28:11][358453421335257][7359 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-09-08 19:28:11][358453421335257][7359 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:28:13][358453421335257][0 ms][INFO] === Request start === [2025-09-08 19:28:13][358453421335257][1 ms][DEBUG] START check_scloud [2025-09-08 19:28:13][358453421335257][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:28:13][358453421335257][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 25548 4990 24651300 214052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:28:13][358453421335257][318 ms][DEBUG] targetPkg: running [2025-09-08 19:28:13][358453421335257][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 19:28:13][358453421335257][318 ms][DEBUG] START check_boot_completed [2025-09-08 19:28:13][358453421335257][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:28:13][358453421335257][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:28:13][358453421335257][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:28:13][358453421335257][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:28:13][358453421335257][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 19:28:13][358453421335257][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:28:13][358453421335257][521 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2856\nsuccessfulTxPacketsPerSecond: 0.2457296177244109\nretriedTxPackets: 620\nretriedTxPacketsPerSecond: 0.08965810376431209\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2588\nsuccessfulRxPacketsPerSecond: 0.20920224211672822\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:28:13][358453421335257][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:28:14][358453421335257][912 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=284 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 284.592/284.592/284.592/0.000 ms\n [2025-09-08 19:28:14][358453421335257][912 ms][DEBUG] check_internet: online [2025-09-08 19:28:14][358453421335257][912 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:28:14][358453421335257][912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453421335257\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1273\"}'\'' -e'"" [2025-09-08 19:28:14][358453421335257][912 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:28:14][358453421335257][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453421335257\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1273\"}'\'' -e'"" [2025-09-08 19:28:19][358453421335257][5770 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93e609be-6107-4555-9da1-ba989b0a23b2","id":"QR_93e609be-6107-4555-9da1-ba989b0a23b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:28:19][358453421335257][5926 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-08 19:28:19][358453421335257][5926 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-08 19:28:19][358453421335257][5926 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:28:24][356479635114297][0 ms][INFO] === Request start === [2025-09-08 19:28:24][356479635114297][1 ms][DEBUG] START check_scloud [2025-09-08 19:28:24][356479635114297][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:28:25][356479635114297][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 25548 4990 24783660 216928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:28:25][356479635114297][312 ms][DEBUG] targetPkg: running [2025-09-08 19:28:25][356479635114297][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 19:28:25][356479635114297][312 ms][DEBUG] START check_boot_completed [2025-09-08 19:28:25][356479635114297][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:28:25][356479635114297][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:28:25][356479635114297][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:28:25][356479635114297][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:28:25][356479635114297][406 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 19:28:25][356479635114297][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:28:25][356479635114297][530 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2856\nsuccessfulTxPacketsPerSecond: 0.2457296177244109\nretriedTxPackets: 620\nretriedTxPacketsPerSecond: 0.08965810376431209\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2588\nsuccessfulRxPacketsPerSecond: 0.20920224211672822\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:28:25][356479635114297][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:28:25][356479635114297][890 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.499/249.499/249.499/0.000 ms\n [2025-09-08 19:28:25][356479635114297][890 ms][DEBUG] check_internet: online [2025-09-08 19:28:25][356479635114297][890 ms][DEBUG] rawBody.length=1159 [2025-09-08 19:28:25][356479635114297][890 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356479635114297\",\"model\":\"SM-T875\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5834\"}'\'' -e'"" [2025-09-08 19:28:25][356479635114297][890 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:28:25][356479635114297][890 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356479635114297\",\"model\":\"SM-T875\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5834\"}'\'' -e'"" [2025-09-08 19:28:30][356479635114297][5310 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b11f513-0d30-41b1-a88a-7d0288423198","id":"QR_2b11f513-0d30-41b1-a88a-7d0288423198","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:28:30][356479635114297][5466 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-09-08 19:28:30][356479635114297][5466 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-09-08 19:28:30][356479635114297][5466 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:28:33][356479635114297][0 ms][INFO] === Request start === [2025-09-08 19:28:33][356479635114297][1 ms][DEBUG] START check_scloud [2025-09-08 19:28:33][356479635114297][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:28:33][356479635114297][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 25548 4990 24913936 228440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:28:33][356479635114297][297 ms][DEBUG] targetPkg: running [2025-09-08 19:28:33][356479635114297][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-08 19:28:33][356479635114297][297 ms][DEBUG] START check_boot_completed [2025-09-08 19:28:33][356479635114297][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:28:34][356479635114297][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:28:34][356479635114297][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:28:34][356479635114297][437 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 19:28:34][356479635114297][437 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 19:28:34][356479635114297][437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:28:34][356479635114297][562 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2856\nsuccessfulTxPacketsPerSecond: 0.2457296177244109\nretriedTxPackets: 620\nretriedTxPacketsPerSecond: 0.08965810376431209\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2588\nsuccessfulRxPacketsPerSecond: 0.20920224211672822\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:28:34][356479635114297][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:28:34][356479635114297][921 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.790/257.790/257.790/0.000 ms\n [2025-09-08 19:28:34][356479635114297][921 ms][DEBUG] check_internet: online [2025-09-08 19:28:34][356479635114297][921 ms][DEBUG] rawBody.length=1149 [2025-09-08 19:28:34][356479635114297][921 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356479635114297\",\"model\":\"SM-T875\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7155\"}'\'' -e'"" [2025-09-08 19:28:34][356479635114297][921 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:28:34][356479635114297][921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356479635114297\",\"model\":\"SM-T875\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7155\"}'\'' -e'"" [2025-09-08 19:28:38][356479635114297][5060 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_652fa1d3-b232-4077-a88c-66a4d79d4422","id":"QR_652fa1d3-b232-4077-a88c-66a4d79d4422","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:28:38][356479635114297][5217 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-09-08 19:28:38][356479635114297][5217 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-09-08 19:28:38][356479635114297][5217 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:29:05][352467928762645][0 ms][INFO] === Request start === [2025-09-08 19:29:05][352467928762645][1 ms][DEBUG] START check_scloud [2025-09-08 19:29:05][352467928762645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:29:05][352467928762645][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 25548 4990 25005232 239712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:29:05][352467928762645][299 ms][DEBUG] targetPkg: running [2025-09-08 19:29:05][352467928762645][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 19:29:05][352467928762645][300 ms][DEBUG] START check_boot_completed [2025-09-08 19:29:05][352467928762645][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:29:05][352467928762645][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:29:05][352467928762645][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:29:05][352467928762645][408 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 19:29:05][352467928762645][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 19:29:05][352467928762645][409 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:29:05][352467928762645][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467928762645\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6772\"}'\'' -e'"" [2025-09-08 19:29:05][352467928762645][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:29:05][352467928762645][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467928762645\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6772\"}'\'' -e'"" [2025-09-08 19:29:09][352467928762645][4142 ms][DEBUG] proc_open done in 3733 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 19:29:09][352467928762645][4142 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-08 19:29:09][352467928762645][4142 ms][WARN] Detected error: Process with pid 25548 either refused to load frida-agent, or terminated during injectionProcess with pid 25548 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 19:29:09][352467928762645][4142 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 19:29:09][352467928762645][4454 ms][DEBUG] SU: done in 312 ms; outsystem 5411 4990 12984052 190680 ep_poll 0 S system_server\n [2025-09-08 19:29:09][352467928762645][4455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 19:29:09][352467928762645][4595 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 19:29:09][352467928762645][4595 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 19:29:09][352467928762645][4595 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 19:29:09][352467928762645][4720 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 19:29:09][352467928762645][4720 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 19:29:10][352467928762645][4876 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 19:29:12][352467928762645][6891 ms][DEBUG] START check_boot_completed [2025-09-08 19:29:12][352467928762645][6891 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:29:12][352467928762645][6938 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:29:12][352467928762645][6938 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:29:12][352467928762645][7000 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 19:29:12][352467928762645][7001 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 19:29:15][352467928762645][10015 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 19:29:15][352467928762645][10015 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467928762645\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6772\"}'\'' -e'"" [2025-09-08 19:29:20][352467928762645][14905 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1afda433-d667-4d7d-8e0c-c0708de64723","id":"QR_1afda433-d667-4d7d-8e0c-c0708de64723","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:29:20][352467928762645][15061 ms][DEBUG] proc_open done in 5046 ms; code=255; res.len=3343 [2025-09-08 19:29:20][352467928762645][15061 ms][DEBUG] END runCmdUntilRes#2 in 5046 ms [2025-09-08 19:29:20][352467928762645][15061 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:29:23][352467928762645][0 ms][INFO] === Request start === [2025-09-08 19:29:23][352467928762645][1 ms][DEBUG] START check_scloud [2025-09-08 19:29:23][352467928762645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:29:24][352467928762645][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 27176 4990 23753888 124372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:29:24][352467928762645][249 ms][DEBUG] targetPkg: running [2025-09-08 19:29:24][352467928762645][249 ms][DEBUG] END check_scloud in 249 ms [2025-09-08 19:29:24][352467928762645][249 ms][DEBUG] START check_boot_completed [2025-09-08 19:29:24][352467928762645][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:29:24][352467928762645][296 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:29:24][352467928762645][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:29:24][352467928762645][343 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:29:24][352467928762645][343 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 19:29:24][352467928762645][343 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:29:24][352467928762645][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467928762645\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3981\"}'\'' -e'"" [2025-09-08 19:29:24][352467928762645][343 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:29:24][352467928762645][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467928762645\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3981\"}'\'' -e'"" [2025-09-08 19:29:27][352467928762645][3920 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58823c45-2735-4479-9c49-93ade2e61af4","id":"QR_58823c45-2735-4479-9c49-93ade2e61af4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:29:27][352467928762645][4076 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-08 19:29:27][352467928762645][4076 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-08 19:29:27][352467928762645][4076 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:30:30][354432551444794][1 ms][INFO] === Request start === [2025-09-08 19:30:30][354432551444794][1 ms][DEBUG] START check_scloud [2025-09-08 19:30:30][354432551444794][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:30:31][354432551444794][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 27176 4990 23850228 137728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:30:31][354432551444794][313 ms][DEBUG] targetPkg: running [2025-09-08 19:30:31][354432551444794][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 19:30:31][354432551444794][313 ms][DEBUG] START check_boot_completed [2025-09-08 19:30:31][354432551444794][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:30:31][354432551444794][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:30:31][354432551444794][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:30:31][354432551444794][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:30:31][354432551444794][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:30:31][354432551444794][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:30:31][354432551444794][501 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3081\nsuccessfulTxPacketsPerSecond: 0.7470838825783359\nretriedTxPackets: 695\nretriedTxPacketsPerSecond: 0.24902796085944529\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2778\nsuccessfulRxPacketsPerSecond: 0.6308708341772614\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:30:31][354432551444794][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:30:32][354432551444794][1719 ms][DEBUG] SU: done in 1218 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.553/200.553/200.553/0.000 ms\n [2025-09-08 19:30:32][354432551444794][1719 ms][DEBUG] check_internet: online [2025-09-08 19:30:32][354432551444794][1719 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:30:32][354432551444794][1719 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354432551444794\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9411\"}'\'' -e'"" [2025-09-08 19:30:32][354432551444794][1719 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:30:32][354432551444794][1719 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354432551444794\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9411\"}'\'' -e'"" [2025-09-08 19:30:37][354432551444794][6562 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_467bd302-74ca-4392-b8ed-c349eac2269c","id":"QR_467bd302-74ca-4392-b8ed-c349eac2269c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:30:37][354432551444794][6718 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-08 19:30:37][354432551444794][6718 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-08 19:30:37][354432551444794][6718 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:35:03][350215319921938][1 ms][INFO] === Request start === [2025-09-08 19:35:03][350215319921938][1 ms][DEBUG] START check_scloud [2025-09-08 19:35:03][350215319921938][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:35:03][350215319921938][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 27176 4990 24009192 150740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:35:03][350215319921938][252 ms][DEBUG] targetPkg: running [2025-09-08 19:35:03][350215319921938][253 ms][DEBUG] END check_scloud in 251 ms [2025-09-08 19:35:03][350215319921938][253 ms][DEBUG] START check_boot_completed [2025-09-08 19:35:03][350215319921938][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:35:03][350215319921938][284 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:35:03][350215319921938][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:35:03][350215319921938][331 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:35:03][350215319921938][331 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:35:03][350215319921938][331 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:35:03][350215319921938][331 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350215319921938\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1445\"}'\'' -e'"" [2025-09-08 19:35:03][350215319921938][331 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:35:03][350215319921938][331 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350215319921938\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1445\"}'\'' -e'"" [2025-09-08 19:35:08][350215319921938][4627 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf68cfbf-7cc7-4ce6-8a0f-a108a4a33922","id":"QR_bf68cfbf-7cc7-4ce6-8a0f-a108a4a33922","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:35:08][350215319921938][4783 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-09-08 19:35:08][350215319921938][4783 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-09-08 19:35:08][350215319921938][4783 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:35:10][350215319921938][0 ms][INFO] === Request start === [2025-09-08 19:35:10][350215319921938][1 ms][DEBUG] START check_scloud [2025-09-08 19:35:10][350215319921938][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:35:10][350215319921938][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 27176 4990 24183408 159596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:35:10][350215319921938][256 ms][DEBUG] targetPkg: running [2025-09-08 19:35:10][350215319921938][256 ms][DEBUG] END check_scloud in 256 ms [2025-09-08 19:35:10][350215319921938][256 ms][DEBUG] START check_boot_completed [2025-09-08 19:35:10][350215319921938][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:35:10][350215319921938][303 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:35:10][350215319921938][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:35:10][350215319921938][366 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 19:35:10][350215319921938][366 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 19:35:10][350215319921938][366 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:35:10][350215319921938][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350215319921938\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3461\"}'\'' -e'"" [2025-09-08 19:35:10][350215319921938][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:35:10][350215319921938][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350215319921938\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3461\"}'\'' -e'"" [2025-09-08 19:35:16][350215319921938][5864 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f3743f2-d01f-4d5d-9301-a7482e074b43","id":"QR_3f3743f2-d01f-4d5d-9301-a7482e074b43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:35:16][350215319921938][6020 ms][DEBUG] proc_open done in 5654 ms; code=255; res.len=3343 [2025-09-08 19:35:16][350215319921938][6020 ms][DEBUG] END runCmdUntilRes#1 in 5654 ms [2025-09-08 19:35:16][350215319921938][6020 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:36:05][355293210555985][0 ms][INFO] === Request start === [2025-09-08 19:36:05][355293210555985][1 ms][DEBUG] START check_scloud [2025-09-08 19:36:05][355293210555985][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:36:05][355293210555985][265 ms][DEBUG] SU: done in 265 ms; outu0_a118 27176 4990 24303408 169584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:36:05][355293210555985][265 ms][DEBUG] targetPkg: running [2025-09-08 19:36:05][355293210555985][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-08 19:36:05][355293210555985][266 ms][DEBUG] START check_boot_completed [2025-09-08 19:36:05][355293210555985][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:36:05][355293210555985][312 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:36:05][355293210555985][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:36:05][355293210555985][375 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 19:36:05][355293210555985][375 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 19:36:05][355293210555985][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:36:05][355293210555985][531 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3180\nsuccessfulTxPacketsPerSecond: 2.5902073335263127\nretriedTxPackets: 719\nretriedTxPacketsPerSecond: 0.5344974385532466\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2863\nsuccessfulRxPacketsPerSecond: 2.1379583043323764\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:36:05][355293210555985][531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:36:06][355293210555985][1812 ms][DEBUG] SU: done in 1281 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.084/200.084/200.084/0.000 ms\n [2025-09-08 19:36:06][355293210555985][1812 ms][DEBUG] check_internet: online [2025-09-08 19:36:06][355293210555985][1813 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:36:06][355293210555985][1813 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355293210555985\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3343\"}'\'' -e'"" [2025-09-08 19:36:06][355293210555985][1813 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:36:06][355293210555985][1813 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355293210555985\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3343\"}'\'' -e'"" [2025-09-08 19:36:11][355293210555985][6607 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e16003ec-3be7-4823-9a83-e82ecf6f80f5","id":"QR_e16003ec-3be7-4823-9a83-e82ecf6f80f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:36:11][355293210555985][6764 ms][DEBUG] proc_open done in 4951 ms; code=255; res.len=3343 [2025-09-08 19:36:11][355293210555985][6764 ms][DEBUG] END runCmdUntilRes#1 in 4951 ms [2025-09-08 19:36:11][355293210555985][6764 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:36:15][355293210555985][0 ms][INFO] === Request start === [2025-09-08 19:36:15][355293210555985][1 ms][DEBUG] START check_scloud [2025-09-08 19:36:15][355293210555985][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:36:15][355293210555985][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 27176 4990 24479728 181424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:36:15][355293210555985][322 ms][DEBUG] targetPkg: running [2025-09-08 19:36:15][355293210555985][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-08 19:36:15][355293210555985][322 ms][DEBUG] START check_boot_completed [2025-09-08 19:36:15][355293210555985][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:36:15][355293210555985][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:36:15][355293210555985][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:36:15][355293210555985][447 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 19:36:15][355293210555985][447 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 19:36:15][355293210555985][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:36:15][355293210555985][572 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3180\nsuccessfulTxPacketsPerSecond: 2.5902073335263127\nretriedTxPackets: 719\nretriedTxPacketsPerSecond: 0.5344974385532466\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2863\nsuccessfulRxPacketsPerSecond: 2.1379583043323764\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:36:15][355293210555985][572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:36:16][355293210555985][915 ms][DEBUG] SU: done in 343 ms; outPING google.com (172.253.63.102) 56(84) bytes of data.\n64 bytes from bi-in-f102.1e100.net (172.253.63.102): icmp_seq=1 ttl=106 time=210 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 210.195/210.195/210.195/0.000 ms\n [2025-09-08 19:36:16][355293210555985][916 ms][DEBUG] check_internet: online [2025-09-08 19:36:16][355293210555985][916 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:36:16][355293210555985][916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355293210555985\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2599\"}'\'' -e'"" [2025-09-08 19:36:16][355293210555985][916 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:36:16][355293210555985][916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355293210555985\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2599\"}'\'' -e'"" [2025-09-08 19:36:20][355293210555985][4821 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b716691-b215-4ff0-a333-d6d92f4945b5","id":"QR_8b716691-b215-4ff0-a333-d6d92f4945b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:36:20][355293210555985][4977 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-08 19:36:20][355293210555985][4977 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-08 19:36:20][355293210555985][4977 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:37:04][350039930302645][1 ms][INFO] === Request start === [2025-09-08 19:37:04][350039930302645][1 ms][DEBUG] START check_scloud [2025-09-08 19:37:04][350039930302645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:37:04][350039930302645][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 27176 4990 24600872 191648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:37:04][350039930302645][314 ms][DEBUG] targetPkg: running [2025-09-08 19:37:04][350039930302645][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 19:37:04][350039930302645][314 ms][DEBUG] START check_boot_completed [2025-09-08 19:37:04][350039930302645][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:37:04][350039930302645][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:37:04][350039930302645][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:37:05][350039930302645][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 19:37:05][350039930302645][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 19:37:05][350039930302645][424 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:37:05][350039930302645][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039930302645\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8818\"}'\'' -e'"" [2025-09-08 19:37:05][350039930302645][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:37:05][350039930302645][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039930302645\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8818\"}'\'' -e'"" [2025-09-08 19:37:10][350039930302645][5703 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6b68764-cb02-4367-89b7-185237e1ce7a","id":"QR_f6b68764-cb02-4367-89b7-185237e1ce7a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:37:10][350039930302645][5860 ms][DEBUG] proc_open done in 5435 ms; code=255; res.len=3343 [2025-09-08 19:37:10][350039930302645][5860 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-08 19:37:10][350039930302645][5860 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:37:14][350039930302645][0 ms][INFO] === Request start === [2025-09-08 19:37:14][350039930302645][1 ms][DEBUG] START check_scloud [2025-09-08 19:37:14][350039930302645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:37:14][350039930302645][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 27176 4990 24720816 203416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:37:14][350039930302645][316 ms][DEBUG] targetPkg: running [2025-09-08 19:37:14][350039930302645][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 19:37:14][350039930302645][316 ms][DEBUG] START check_boot_completed [2025-09-08 19:37:14][350039930302645][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:37:14][350039930302645][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:37:14][350039930302645][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:37:14][350039930302645][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:37:14][350039930302645][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:37:14][350039930302645][395 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:37:14][350039930302645][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039930302645\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1012\"}'\'' -e'"" [2025-09-08 19:37:14][350039930302645][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:37:14][350039930302645][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039930302645\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1012\"}'\'' -e'"" [2025-09-08 19:37:17][350039930302645][3800 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2e808a1-080e-46f7-9a37-328442f89d93","id":"QR_b2e808a1-080e-46f7-9a37-328442f89d93","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:37:17][350039930302645][3956 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-08 19:37:17][350039930302645][3956 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-09-08 19:37:17][350039930302645][3956 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:37:21][357083102931586][0 ms][INFO] === Request start === [2025-09-08 19:37:21][357083102931586][1 ms][DEBUG] START check_scloud [2025-09-08 19:37:21][357083102931586][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:37:21][357083102931586][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 27176 4990 24849016 214020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:37:21][357083102931586][284 ms][DEBUG] targetPkg: running [2025-09-08 19:37:21][357083102931586][284 ms][DEBUG] END check_scloud in 284 ms [2025-09-08 19:37:21][357083102931586][284 ms][DEBUG] START check_boot_completed [2025-09-08 19:37:21][357083102931586][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:37:21][357083102931586][315 ms][DEBUG] ADB: done in 30 ms; out [2025-09-08 19:37:21][357083102931586][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:37:21][357083102931586][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:37:21][357083102931586][362 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-08 19:37:21][357083102931586][362 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:37:21][357083102931586][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357083102931586\",\"model\":\"SM-T727V\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3641\"}'\'' -e'"" [2025-09-08 19:37:21][357083102931586][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:37:21][357083102931586][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357083102931586\",\"model\":\"SM-T727V\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3641\"}'\'' -e'"" [2025-09-08 19:37:24][357083102931586][3954 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 19:37:25][357083102931586][4111 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=115 [2025-09-08 19:37:25][357083102931586][4111 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-08 19:37:25][357083102931586][4111 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 19:37:25][][0 ms][INFO] === Request start === [2025-09-08 19:37:25][][1 ms][DEBUG] START check_scloud [2025-09-08 19:37:25][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:37:25][][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 27176 4990 24997760 225880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:37:25][][311 ms][DEBUG] targetPkg: running [2025-09-08 19:37:25][][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 19:37:25][][311 ms][DEBUG] START check_boot_completed [2025-09-08 19:37:25][][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:37:25][][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:37:25][][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:37:25][][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:37:25][][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:37:25][][388 ms][DEBUG] rawBody.length=1141 [2025-09-08 19:37:25][][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T727V\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R80F9BRM\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2818\"}'\'' -e'"" [2025-09-08 19:37:25][][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:37:25][][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T727V\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R80F9BRM\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2818\"}'\'' -e'"" [2025-09-08 19:37:29][][3872 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 19:37:29][][4028 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=115 [2025-09-08 19:37:29][][4028 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-09-08 19:37:29][][4028 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 19:37:29][357083102931586][0 ms][INFO] === Request start === [2025-09-08 19:37:29][357083102931586][1 ms][DEBUG] START check_scloud [2025-09-08 19:37:29][357083102931586][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:37:30][357083102931586][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 27176 4990 25138276 237896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:37:30][357083102931586][321 ms][DEBUG] targetPkg: running [2025-09-08 19:37:30][357083102931586][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-08 19:37:30][357083102931586][321 ms][DEBUG] START check_boot_completed [2025-09-08 19:37:30][357083102931586][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:37:30][357083102931586][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:37:30][357083102931586][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:37:30][357083102931586][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:37:30][357083102931586][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 19:37:30][357083102931586][414 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:37:30][357083102931586][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357083102931586\",\"model\":\"SM-T727V\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2074\"}'\'' -e'"" [2025-09-08 19:37:30][357083102931586][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:37:30][357083102931586][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357083102931586\",\"model\":\"SM-T727V\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2074\"}'\'' -e'"" [2025-09-08 19:37:34][357083102931586][4195 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 19:37:34][357083102931586][4195 ms][DEBUG] END runCmdUntilRes#1 in 3781 ms [2025-09-08 19:37:34][357083102931586][4195 ms][WARN] Detected error: Process with pid 27176 either refused to load frida-agent, or terminated during injectionProcess with pid 27176 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 19:37:34][357083102931586][4195 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 19:37:34][357083102931586][4507 ms][DEBUG] SU: done in 312 ms; outsystem 5411 4990 13094212 224128 ep_poll 0 S system_server\n [2025-09-08 19:37:34][357083102931586][4507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 19:37:34][357083102931586][4664 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 19:37:34][357083102931586][4664 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 19:37:34][357083102931586][4664 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 19:37:34][357083102931586][4788 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 19:37:34][357083102931586][4789 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 19:37:34][357083102931586][4960 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 19:37:36][357083102931586][6975 ms][DEBUG] START check_boot_completed [2025-09-08 19:37:36][357083102931586][6975 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:37:36][357083102931586][7022 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:37:36][357083102931586][7022 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:37:36][357083102931586][7085 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 19:37:36][357083102931586][7085 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 19:37:39][357083102931586][10100 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 19:37:39][357083102931586][10100 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357083102931586\",\"model\":\"SM-T727V\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2074\"}'\'' -e'"" [2025-09-08 19:37:43][357083102931586][13802 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97618c66-9f17-473e-b615-6eb4ecd2d898","id":"QR_97618c66-9f17-473e-b615-6eb4ecd2d898","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:37:43][357083102931586][13958 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-08 19:37:43][357083102931586][13958 ms][DEBUG] END runCmdUntilRes#2 in 3859 ms [2025-09-08 19:37:43][357083102931586][13958 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:46:03][357794344138919][1 ms][INFO] === Request start === [2025-09-08 19:46:03][357794344138919][1 ms][DEBUG] START check_scloud [2025-09-08 19:46:03][357794344138919][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:46:03][357794344138919][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 29521 4990 23713620 127980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:46:03][357794344138919][300 ms][DEBUG] targetPkg: running [2025-09-08 19:46:03][357794344138919][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-08 19:46:03][357794344138919][300 ms][DEBUG] START check_boot_completed [2025-09-08 19:46:03][357794344138919][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:46:03][357794344138919][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:46:03][357794344138919][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:46:03][357794344138919][440 ms][DEBUG] SU: done in 93 ms; out [2025-09-08 19:46:03][357794344138919][440 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 19:46:03][357794344138919][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:46:04][357794344138919][549 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3525\nsuccessfulTxPacketsPerSecond: 0.537971846140052\nretriedTxPackets: 833\nretriedTxPacketsPerSecond: 0.14943662392779222\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3137\nsuccessfulRxPacketsPerSecond: 0.44166824405325256\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:46:04][357794344138919][550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:46:05][357794344138919][1846 ms][DEBUG] SU: done in 1296 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.358/198.358/198.358/0.000 ms\n [2025-09-08 19:46:05][357794344138919][1846 ms][DEBUG] check_internet: online [2025-09-08 19:46:05][357794344138919][1846 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:46:05][357794344138919][1846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357794344138919\",\"model\":\"SM-A245N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6389\"}'\'' -e'"" [2025-09-08 19:46:05][357794344138919][1846 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:46:05][357794344138919][1846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357794344138919\",\"model\":\"SM-A245N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6389\"}'\'' -e'"" [2025-09-08 19:46:08][357794344138919][5376 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 19:46:09][357794344138919][5532 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=115 [2025-09-08 19:46:09][357794344138919][5533 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-09-08 19:46:09][357794344138919][5533 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 19:46:09][][0 ms][INFO] === Request start === [2025-09-08 19:46:09][][1 ms][DEBUG] START check_scloud [2025-09-08 19:46:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:46:09][][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 29521 4990 23912424 138636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:46:09][][308 ms][DEBUG] targetPkg: running [2025-09-08 19:46:09][][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 19:46:09][][308 ms][DEBUG] START check_boot_completed [2025-09-08 19:46:09][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:46:09][][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:46:09][][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:46:09][][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:46:09][][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 19:46:09][][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:46:09][][511 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3525\nsuccessfulTxPacketsPerSecond: 0.537971846140052\nretriedTxPackets: 833\nretriedTxPacketsPerSecond: 0.14943662392779222\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3137\nsuccessfulRxPacketsPerSecond: 0.44166824405325256\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:46:09][][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:46:10][][776 ms][DEBUG] SU: done in 265 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.774/163.774/163.774/0.000 ms\n [2025-09-08 19:46:10][][776 ms][DEBUG] check_internet: online [2025-09-08 19:46:10][][776 ms][DEBUG] rawBody.length=1131 [2025-09-08 19:46:10][][776 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A245N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R59WC02CV5B\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1226\"}'\'' -e'"" [2025-09-08 19:46:10][][777 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:46:10][][777 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A245N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R59WC02CV5B\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1226\"}'\'' -e'"" [2025-09-08 19:46:13][][3900 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 19:46:13][][4056 ms][DEBUG] proc_open done in 3280 ms; code=255; res.len=115 [2025-09-08 19:46:13][][4056 ms][DEBUG] END runCmdUntilRes#1 in 3280 ms [2025-09-08 19:46:13][][4056 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 19:46:14][357794344138919][0 ms][INFO] === Request start === [2025-09-08 19:46:14][357794344138919][1 ms][DEBUG] START check_scloud [2025-09-08 19:46:14][357794344138919][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:46:15][357794344138919][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 29521 4990 24087664 150208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:46:15][357794344138919][310 ms][DEBUG] targetPkg: running [2025-09-08 19:46:15][357794344138919][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 19:46:15][357794344138919][310 ms][DEBUG] START check_boot_completed [2025-09-08 19:46:15][357794344138919][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:46:15][357794344138919][354 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 19:46:15][357794344138919][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:46:15][357794344138919][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:46:15][357794344138919][401 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 19:46:15][357794344138919][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:46:15][357794344138919][511 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3525\nsuccessfulTxPacketsPerSecond: 0.537971846140052\nretriedTxPackets: 833\nretriedTxPacketsPerSecond: 0.14943662392779222\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3137\nsuccessfulRxPacketsPerSecond: 0.44166824405325256\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:46:15][357794344138919][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:46:15][357794344138919][823 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=195 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 195.334/195.334/195.334/0.000 ms\n [2025-09-08 19:46:15][357794344138919][823 ms][DEBUG] check_internet: online [2025-09-08 19:46:15][357794344138919][823 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:46:15][357794344138919][823 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357794344138919\",\"model\":\"SM-A245N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1211\"}'\'' -e'"" [2025-09-08 19:46:15][357794344138919][824 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:46:15][357794344138919][824 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357794344138919\",\"model\":\"SM-A245N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1211\"}'\'' -e'"" [2025-09-08 19:46:20][357794344138919][5462 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_180f5356-a1f5-4feb-a98f-addb98208c6f","id":"QR_180f5356-a1f5-4feb-a98f-addb98208c6f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:46:20][357794344138919][5619 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 19:46:20][357794344138919][5619 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 19:46:20][357794344138919][5619 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:47:04][352498781370325][0 ms][INFO] === Request start === [2025-09-08 19:47:04][352498781370325][1 ms][DEBUG] START check_scloud [2025-09-08 19:47:04][352498781370325][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:47:04][352498781370325][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 29521 4990 24214796 161528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:47:04][352498781370325][259 ms][DEBUG] targetPkg: running [2025-09-08 19:47:04][352498781370325][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-08 19:47:04][352498781370325][259 ms][DEBUG] START check_boot_completed [2025-09-08 19:47:04][352498781370325][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:47:04][352498781370325][290 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:47:04][352498781370325][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:47:04][352498781370325][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:47:04][352498781370325][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:47:04][352498781370325][337 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:47:04][352498781370325][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352498781370325\",\"model\":\"SM-A235M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5139\"}'\'' -e'"" [2025-09-08 19:47:04][352498781370325][337 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:47:04][352498781370325][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352498781370325\",\"model\":\"SM-A235M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5139\"}'\'' -e'"" [2025-09-08 19:47:09][352498781370325][5023 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c35447a-9fae-4b84-888a-ded5cd2179e9","id":"QR_0c35447a-9fae-4b84-888a-ded5cd2179e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:47:09][352498781370325][5180 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-08 19:47:09][352498781370325][5180 ms][DEBUG] END runCmdUntilRes#1 in 4843 ms [2025-09-08 19:47:09][352498781370325][5180 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:47:13][352498781370325][0 ms][INFO] === Request start === [2025-09-08 19:47:13][352498781370325][1 ms][DEBUG] START check_scloud [2025-09-08 19:47:13][352498781370325][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:47:13][352498781370325][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 29521 4990 24367636 172272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:47:13][352498781370325][290 ms][DEBUG] targetPkg: running [2025-09-08 19:47:13][352498781370325][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 19:47:13][352498781370325][290 ms][DEBUG] START check_boot_completed [2025-09-08 19:47:13][352498781370325][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:47:13][352498781370325][335 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 19:47:13][352498781370325][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:47:13][352498781370325][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:47:13][352498781370325][382 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 19:47:13][352498781370325][382 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:47:13][352498781370325][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352498781370325\",\"model\":\"SM-A235M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8466\"}'\'' -e'"" [2025-09-08 19:47:13][352498781370325][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:47:13][352498781370325][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352498781370325\",\"model\":\"SM-A235M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8466\"}'\'' -e'"" [2025-09-08 19:47:18][352498781370325][5584 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f86e42e-f863-4541-b41e-bdcf5bd9dfa2","id":"QR_3f86e42e-f863-4541-b41e-bdcf5bd9dfa2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:47:18][352498781370325][5740 ms][DEBUG] proc_open done in 5358 ms; code=255; res.len=3343 [2025-09-08 19:47:18][352498781370325][5740 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-09-08 19:47:18][352498781370325][5740 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:49:05][356544397580322][1 ms][INFO] === Request start === [2025-09-08 19:49:05][356544397580322][1 ms][DEBUG] START check_scloud [2025-09-08 19:49:05][356544397580322][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:49:05][356544397580322][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 29521 4990 24467028 184244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:49:05][356544397580322][299 ms][DEBUG] targetPkg: running [2025-09-08 19:49:05][356544397580322][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 19:49:05][356544397580322][299 ms][DEBUG] START check_boot_completed [2025-09-08 19:49:05][356544397580322][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:49:05][356544397580322][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:49:05][356544397580322][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:49:05][356544397580322][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:49:05][356544397580322][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:49:05][356544397580322][377 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:49:05][356544397580322][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544397580322\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1892\"}'\'' -e'"" [2025-09-08 19:49:05][356544397580322][377 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:49:05][356544397580322][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544397580322\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1892\"}'\'' -e'"" [2025-09-08 19:49:11][356544397580322][5969 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0fc3e3c1-17ac-4303-9341-cc67f30c7ede","id":"QR_0fc3e3c1-17ac-4303-9341-cc67f30c7ede","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:49:11][356544397580322][6126 ms][DEBUG] proc_open done in 5748 ms; code=255; res.len=3343 [2025-09-08 19:49:11][356544397580322][6126 ms][DEBUG] END runCmdUntilRes#1 in 5749 ms [2025-09-08 19:49:11][356544397580322][6126 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:49:14][356544397580322][0 ms][INFO] === Request start === [2025-09-08 19:49:14][356544397580322][1 ms][DEBUG] START check_scloud [2025-09-08 19:49:14][356544397580322][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:49:15][356544397580322][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 29521 4990 24605404 194412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:49:15][356544397580322][249 ms][DEBUG] targetPkg: running [2025-09-08 19:49:15][356544397580322][249 ms][DEBUG] END check_scloud in 249 ms [2025-09-08 19:49:15][356544397580322][249 ms][DEBUG] START check_boot_completed [2025-09-08 19:49:15][356544397580322][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:49:15][356544397580322][294 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 19:49:15][356544397580322][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:49:15][356544397580322][357 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 19:49:15][356544397580322][357 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 19:49:15][356544397580322][357 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:49:15][356544397580322][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544397580322\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1762\"}'\'' -e'"" [2025-09-08 19:49:15][356544397580322][357 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:49:15][356544397580322][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544397580322\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1762\"}'\'' -e'"" [2025-09-08 19:49:19][356544397580322][4200 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70225290-da99-424d-bf16-3f317096d6ca","id":"QR_70225290-da99-424d-bf16-3f317096d6ca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:49:19][356544397580322][4356 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-08 19:49:19][356544397580322][4356 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-08 19:49:19][356544397580322][4356 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:52:05][355030765005499][1 ms][INFO] === Request start === [2025-09-08 19:52:05][355030765005499][1 ms][DEBUG] START check_scloud [2025-09-08 19:52:05][355030765005499][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:52:05][355030765005499][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 29521 4990 24692508 204740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:52:05][355030765005499][317 ms][DEBUG] targetPkg: running [2025-09-08 19:52:05][355030765005499][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 19:52:05][355030765005499][317 ms][DEBUG] START check_boot_completed [2025-09-08 19:52:05][355030765005499][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:52:05][355030765005499][348 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:52:05][355030765005499][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:52:05][355030765005499][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:52:05][355030765005499][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:52:05][355030765005499][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:52:05][355030765005499][520 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3745\nsuccessfulTxPacketsPerSecond: 0.3821613717931676\nretriedTxPackets: 904\nretriedTxPacketsPerSecond: 0.11630998271965971\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3323\nsuccessfulRxPacketsPerSecond: 0.3256679516150472\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:52:05][355030765005499][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:52:06][355030765005499][1801 ms][DEBUG] SU: done in 1281 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.421/198.421/198.421/0.000 ms\n [2025-09-08 19:52:06][355030765005499][1801 ms][DEBUG] check_internet: online [2025-09-08 19:52:06][355030765005499][1802 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:52:06][355030765005499][1802 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355030765005499\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7782\"}'\'' -e'"" [2025-09-08 19:52:06][355030765005499][1802 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:52:06][355030765005499][1802 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355030765005499\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7782\"}'\'' -e'"" [2025-09-08 19:52:12][355030765005499][6941 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf319954-2cef-4c8e-b31c-221d5e0acb10","id":"QR_cf319954-2cef-4c8e-b31c-221d5e0acb10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:52:12][355030765005499][7097 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 19:52:12][355030765005499][7097 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 19:52:12][355030765005499][7097 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:52:15][355030765005499][0 ms][INFO] === Request start === [2025-09-08 19:52:15][355030765005499][1 ms][DEBUG] START check_scloud [2025-09-08 19:52:15][355030765005499][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:52:16][355030765005499][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 29521 4990 24824744 215536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:52:16][355030765005499][311 ms][DEBUG] targetPkg: running [2025-09-08 19:52:16][355030765005499][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 19:52:16][355030765005499][311 ms][DEBUG] START check_boot_completed [2025-09-08 19:52:16][355030765005499][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:52:16][355030765005499][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:52:16][355030765005499][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:52:16][355030765005499][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 19:52:16][355030765005499][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 19:52:16][355030765005499][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:52:16][355030765005499][545 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3745\nsuccessfulTxPacketsPerSecond: 0.3821613717931676\nretriedTxPackets: 904\nretriedTxPacketsPerSecond: 0.11630998271965971\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3323\nsuccessfulRxPacketsPerSecond: 0.3256679516150472\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:52:16][355030765005499][545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:52:16][355030765005499][889 ms][DEBUG] SU: done in 343 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.329/227.329/227.329/0.000 ms\n [2025-09-08 19:52:16][355030765005499][889 ms][DEBUG] check_internet: online [2025-09-08 19:52:16][355030765005499][889 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:52:16][355030765005499][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355030765005499\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2932\"}'\'' -e'"" [2025-09-08 19:52:16][355030765005499][889 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:52:16][355030765005499][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355030765005499\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2932\"}'\'' -e'"" [2025-09-08 19:52:20][355030765005499][4872 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_764b9c7a-0c2f-4b13-82f5-a1ba7e5fe56c","id":"QR_764b9c7a-0c2f-4b13-82f5-a1ba7e5fe56c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:52:20][355030765005499][5028 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-09-08 19:52:20][355030765005499][5028 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-09-08 19:52:20][355030765005499][5028 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:53:03][352505381351214][0 ms][INFO] === Request start === [2025-09-08 19:53:03][352505381351214][1 ms][DEBUG] START check_scloud [2025-09-08 19:53:03][352505381351214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:53:04][352505381351214][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 29521 4990 24932328 227076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:53:04][352505381351214][303 ms][DEBUG] targetPkg: running [2025-09-08 19:53:04][352505381351214][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 19:53:04][352505381351214][303 ms][DEBUG] START check_boot_completed [2025-09-08 19:53:04][352505381351214][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:53:04][352505381351214][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 19:53:04][352505381351214][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:53:04][352505381351214][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:53:04][352505381351214][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 19:53:04][352505381351214][396 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:53:04][352505381351214][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352505381351214\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9208\"}'\'' -e'"" [2025-09-08 19:53:04][352505381351214][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:53:04][352505381351214][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352505381351214\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9208\"}'\'' -e'"" [2025-09-08 19:53:07][352505381351214][3692 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c2f8ddc-75dd-4174-8f9b-fa0ae491a612","id":"QR_9c2f8ddc-75dd-4174-8f9b-fa0ae491a612","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:53:07][352505381351214][3848 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-08 19:53:07][352505381351214][3848 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-08 19:53:07][352505381351214][3848 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:53:10][352505381351214][0 ms][INFO] === Request start === [2025-09-08 19:53:10][352505381351214][1 ms][DEBUG] START check_scloud [2025-09-08 19:53:10][352505381351214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:53:10][352505381351214][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 29521 4990 25070768 237952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:53:10][352505381351214][315 ms][DEBUG] targetPkg: running [2025-09-08 19:53:10][352505381351214][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 19:53:10][352505381351214][316 ms][DEBUG] START check_boot_completed [2025-09-08 19:53:10][352505381351214][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:53:10][352505381351214][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:53:10][352505381351214][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:53:10][352505381351214][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:53:10][352505381351214][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 19:53:10][352505381351214][394 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:53:10][352505381351214][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352505381351214\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5309\"}'\'' -e'"" [2025-09-08 19:53:10][352505381351214][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:53:10][352505381351214][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352505381351214\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5309\"}'\'' -e'"" [2025-09-08 19:53:14][352505381351214][4127 ms][DEBUG] proc_open done in 3734 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 19:53:14][352505381351214][4128 ms][DEBUG] END runCmdUntilRes#1 in 3734 ms [2025-09-08 19:53:14][352505381351214][4128 ms][WARN] Detected error: Process with pid 29521 either refused to load frida-agent, or terminated during injectionProcess with pid 29521 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 19:53:14][352505381351214][4128 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 19:53:14][352505381351214][4440 ms][DEBUG] SU: done in 312 ms; outsystem 5411 4990 13003300 209448 ep_poll 0 S system_server\n [2025-09-08 19:53:14][352505381351214][4440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 19:53:14][352505381351214][4580 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 19:53:14][352505381351214][4580 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 19:53:14][352505381351214][4580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 19:53:14][352505381351214][4705 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 19:53:14][352505381351214][4705 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 19:53:14][352505381351214][4861 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 19:53:16][352505381351214][6876 ms][DEBUG] START check_boot_completed [2025-09-08 19:53:16][352505381351214][6877 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:53:16][352505381351214][6923 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:53:16][352505381351214][6923 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:53:17][352505381351214][6970 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 19:53:17][352505381351214][6970 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 19:53:20][352505381351214][9985 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 19:53:20][352505381351214][9985 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352505381351214\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5309\"}'\'' -e'"" [2025-09-08 19:53:25][352505381351214][15609 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17e603d2-6aea-41f6-9917-d90b6bbfb7c1","id":"QR_17e603d2-6aea-41f6-9917-d90b6bbfb7c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:53:25][352505381351214][15765 ms][DEBUG] proc_open done in 5780 ms; code=255; res.len=3343 [2025-09-08 19:53:25][352505381351214][15765 ms][DEBUG] END runCmdUntilRes#2 in 5780 ms [2025-09-08 19:53:25][352505381351214][15765 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:54:03][357450475587578][0 ms][INFO] === Request start === [2025-09-08 19:54:03][357450475587578][1 ms][DEBUG] START check_scloud [2025-09-08 19:54:03][357450475587578][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:54:03][357450475587578][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 31034 4990 23743384 127076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:54:03][357450475587578][304 ms][DEBUG] targetPkg: running [2025-09-08 19:54:03][357450475587578][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 19:54:03][357450475587578][304 ms][DEBUG] START check_boot_completed [2025-09-08 19:54:03][357450475587578][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:54:03][357450475587578][350 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:54:03][357450475587578][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:54:03][357450475587578][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 19:54:03][357450475587578][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 19:54:03][357450475587578][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:54:04][357450475587578][553 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3745\nsuccessfulTxPacketsPerSecond: 0.3821613717931676\nretriedTxPackets: 904\nretriedTxPacketsPerSecond: 0.11630998271965971\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3323\nsuccessfulRxPacketsPerSecond: 0.3256679516150472\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:54:04][357450475587578][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:54:05][357450475587578][2053 ms][DEBUG] SU: done in 1499 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.063/196.063/196.063/0.000 ms\n [2025-09-08 19:54:05][357450475587578][2053 ms][DEBUG] check_internet: online [2025-09-08 19:54:05][357450475587578][2053 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:54:05][357450475587578][2053 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450475587578\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4479\"}'\'' -e'"" [2025-09-08 19:54:05][357450475587578][2053 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:54:05][357450475587578][2053 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450475587578\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4479\"}'\'' -e'"" [2025-09-08 19:54:09][357450475587578][5849 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a98171d3-cbda-418b-b303-e116bfeb294b","id":"QR_a98171d3-cbda-418b-b303-e116bfeb294b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:54:09][357450475587578][6005 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-09-08 19:54:09][357450475587578][6005 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-08 19:54:09][357450475587578][6005 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:54:11][357450475587578][0 ms][INFO] === Request start === [2025-09-08 19:54:11][357450475587578][0 ms][DEBUG] START check_scloud [2025-09-08 19:54:11][357450475587578][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:54:12][357450475587578][292 ms][DEBUG] SU: done in 292 ms; outu0_a118 31034 4990 23904288 138080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:54:12][357450475587578][292 ms][DEBUG] targetPkg: running [2025-09-08 19:54:12][357450475587578][292 ms][DEBUG] END check_scloud in 292 ms [2025-09-08 19:54:12][357450475587578][292 ms][DEBUG] START check_boot_completed [2025-09-08 19:54:12][357450475587578][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:54:12][357450475587578][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 19:54:12][357450475587578][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:54:12][357450475587578][386 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 19:54:12][357450475587578][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 19:54:12][357450475587578][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 19:54:12][357450475587578][511 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3745\nsuccessfulTxPacketsPerSecond: 0.3821613717931676\nretriedTxPackets: 904\nretriedTxPacketsPerSecond: 0.11630998271965971\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3323\nsuccessfulRxPacketsPerSecond: 0.3256679516150472\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 19:54:12][357450475587578][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 19:54:12][357450475587578][839 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.924/232.924/232.924/0.000 ms\n [2025-09-08 19:54:12][357450475587578][839 ms][DEBUG] check_internet: online [2025-09-08 19:54:12][357450475587578][839 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:54:12][357450475587578][839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450475587578\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2456\"}'\'' -e'"" [2025-09-08 19:54:12][357450475587578][839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:54:12][357450475587578][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450475587578\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2456\"}'\'' -e'"" [2025-09-08 19:54:17][357450475587578][5384 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc3341ae-6f2c-4d19-9683-b4c9a8e92ce2","id":"QR_fc3341ae-6f2c-4d19-9683-b4c9a8e92ce2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:54:17][357450475587578][5541 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-08 19:54:17][357450475587578][5541 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-08 19:54:17][357450475587578][5541 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:55:05][352460880635248][0 ms][INFO] === Request start === [2025-09-08 19:55:05][352460880635248][0 ms][DEBUG] START check_scloud [2025-09-08 19:55:05][352460880635248][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:55:05][352460880635248][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 31034 4990 24042592 149396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:55:05][352460880635248][315 ms][DEBUG] targetPkg: running [2025-09-08 19:55:05][352460880635248][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 19:55:05][352460880635248][315 ms][DEBUG] START check_boot_completed [2025-09-08 19:55:05][352460880635248][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:55:05][352460880635248][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:55:05][352460880635248][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:55:05][352460880635248][425 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 19:55:05][352460880635248][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 19:55:05][352460880635248][425 ms][DEBUG] rawBody.length=1160 [2025-09-08 19:55:05][352460880635248][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460880635248\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BVO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2228\"}'\'' -e'"" [2025-09-08 19:55:05][352460880635248][425 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:55:05][352460880635248][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460880635248\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BVO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2228\"}'\'' -e'"" [2025-09-08 19:55:11][352460880635248][6204 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4465d2cd-1524-468f-9b62-39fcfc135eb9","id":"QR_4465d2cd-1524-468f-9b62-39fcfc135eb9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:55:11][352460880635248][6360 ms][DEBUG] proc_open done in 5935 ms; code=255; res.len=3343 [2025-09-08 19:55:11][352460880635248][6361 ms][DEBUG] END runCmdUntilRes#1 in 5936 ms [2025-09-08 19:55:11][352460880635248][6361 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 19:55:15][352460880635248][0 ms][INFO] === Request start === [2025-09-08 19:55:15][352460880635248][1 ms][DEBUG] START check_scloud [2025-09-08 19:55:15][352460880635248][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 19:55:15][352460880635248][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 31034 4990 24179868 160160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 19:55:15][352460880635248][302 ms][DEBUG] targetPkg: running [2025-09-08 19:55:15][352460880635248][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 19:55:15][352460880635248][302 ms][DEBUG] START check_boot_completed [2025-09-08 19:55:15][352460880635248][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 19:55:15][352460880635248][349 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 19:55:15][352460880635248][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 19:55:15][352460880635248][411 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 19:55:15][352460880635248][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 19:55:15][352460880635248][411 ms][DEBUG] rawBody.length=1150 [2025-09-08 19:55:15][352460880635248][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460880635248\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2831\"}'\'' -e'"" [2025-09-08 19:55:15][352460880635248][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 19:55:15][352460880635248][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460880635248\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2831\"}'\'' -e'"" [2025-09-08 19:55:19][352460880635248][4066 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8747e88-a684-4c72-91e8-adce7e605a05","id":"QR_e8747e88-a684-4c72-91e8-adce7e605a05","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 19:55:19][352460880635248][4222 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-08 19:55:19][352460880635248][4222 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-09-08 19:55:19][352460880635248][4223 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:01:05][357576781124753][1 ms][INFO] === Request start === [2025-09-08 20:01:05][357576781124753][1 ms][DEBUG] START check_scloud [2025-09-08 20:01:05][357576781124753][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:01:05][357576781124753][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 31034 4990 24354644 173016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:01:05][357576781124753][302 ms][DEBUG] targetPkg: running [2025-09-08 20:01:05][357576781124753][302 ms][DEBUG] END check_scloud in 300 ms [2025-09-08 20:01:05][357576781124753][302 ms][DEBUG] START check_boot_completed [2025-09-08 20:01:05][357576781124753][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:01:05][357576781124753][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 20:01:05][357576781124753][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:01:05][357576781124753][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:01:05][357576781124753][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 20:01:05][357576781124753][395 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:01:05][357576781124753][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576781124753\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5063\"}'\'' -e'"" [2025-09-08 20:01:05][357576781124753][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:01:05][357576781124753][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576781124753\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5063\"}'\'' -e'"" [2025-09-08 20:01:10][357576781124753][5769 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_577555fd-34a4-4f24-8627-3705bfa73ee3","id":"QR_577555fd-34a4-4f24-8627-3705bfa73ee3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:01:10][357576781124753][5925 ms][DEBUG] proc_open done in 5530 ms; code=255; res.len=3343 [2025-09-08 20:01:10][357576781124753][5925 ms][DEBUG] END runCmdUntilRes#1 in 5530 ms [2025-09-08 20:01:10][357576781124753][5925 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:01:14][357576781124753][0 ms][INFO] === Request start === [2025-09-08 20:01:14][357576781124753][1 ms][DEBUG] START check_scloud [2025-09-08 20:01:14][357576781124753][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:01:14][357576781124753][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 31034 4990 24490908 183836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:01:14][357576781124753][299 ms][DEBUG] targetPkg: running [2025-09-08 20:01:14][357576781124753][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-08 20:01:14][357576781124753][299 ms][DEBUG] START check_boot_completed [2025-09-08 20:01:14][357576781124753][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:01:14][357576781124753][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 20:01:14][357576781124753][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:01:14][357576781124753][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:01:14][357576781124753][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 20:01:14][357576781124753][378 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:01:14][357576781124753][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576781124753\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4274\"}'\'' -e'"" [2025-09-08 20:01:14][357576781124753][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:01:14][357576781124753][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576781124753\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4274\"}'\'' -e'"" [2025-09-08 20:01:18][357576781124753][4079 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3be46f9e-8eee-4a18-918f-9f4b69933a39","id":"QR_3be46f9e-8eee-4a18-918f-9f4b69933a39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:01:18][357576781124753][4235 ms][DEBUG] proc_open done in 3857 ms; code=255; res.len=3343 [2025-09-08 20:01:18][357576781124753][4235 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-08 20:01:18][357576781124753][4235 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:03:04][350792526589120][0 ms][INFO] === Request start === [2025-09-08 20:03:04][350792526589120][1 ms][DEBUG] START check_scloud [2025-09-08 20:03:04][350792526589120][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:03:04][350792526589120][274 ms][DEBUG] SU: done in 274 ms; outu0_a118 31034 4990 24616148 195232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:03:04][350792526589120][275 ms][DEBUG] targetPkg: running [2025-09-08 20:03:04][350792526589120][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-08 20:03:04][350792526589120][275 ms][DEBUG] START check_boot_completed [2025-09-08 20:03:04][350792526589120][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:03:04][350792526589120][321 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 20:03:04][350792526589120][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:03:04][350792526589120][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:03:04][350792526589120][369 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 20:03:04][350792526589120][369 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:03:04][350792526589120][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792526589120\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4967\"}'\'' -e'"" [2025-09-08 20:03:04][350792526589120][369 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:03:04][350792526589120][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792526589120\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4967\"}'\'' -e'"" [2025-09-08 20:03:10][350792526589120][6413 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85c6d54d-52bb-41c5-bc5b-853f899592a8","id":"QR_85c6d54d-52bb-41c5-bc5b-853f899592a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:03:11][350792526589120][6570 ms][DEBUG] proc_open done in 6201 ms; code=255; res.len=3343 [2025-09-08 20:03:11][350792526589120][6570 ms][DEBUG] END runCmdUntilRes#1 in 6201 ms [2025-09-08 20:03:11][350792526589120][6570 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:03:14][350792526589120][1 ms][INFO] === Request start === [2025-09-08 20:03:14][350792526589120][1 ms][DEBUG] START check_scloud [2025-09-08 20:03:14][350792526589120][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:03:14][350792526589120][293 ms][DEBUG] SU: done in 291 ms; outu0_a118 31034 4990 24741212 207020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:03:14][350792526589120][293 ms][DEBUG] targetPkg: running [2025-09-08 20:03:14][350792526589120][293 ms][DEBUG] END check_scloud in 291 ms [2025-09-08 20:03:14][350792526589120][293 ms][DEBUG] START check_boot_completed [2025-09-08 20:03:14][350792526589120][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:03:14][350792526589120][324 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 20:03:14][350792526589120][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:03:14][350792526589120][386 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 20:03:14][350792526589120][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 20:03:14][350792526589120][387 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:03:14][350792526589120][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792526589120\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1881\"}'\'' -e'"" [2025-09-08 20:03:14][350792526589120][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:03:14][350792526589120][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792526589120\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1881\"}'\'' -e'"" [2025-09-08 20:03:18][350792526589120][4073 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7fda439-b63c-4a78-8385-b57dbcfb24b6","id":"QR_a7fda439-b63c-4a78-8385-b57dbcfb24b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:03:18][350792526589120][4229 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-09-08 20:03:18][350792526589120][4229 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-09-08 20:03:18][350792526589120][4229 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:06:03][356729404491924][1 ms][INFO] === Request start === [2025-09-08 20:06:03][356729404491924][1 ms][DEBUG] START check_scloud [2025-09-08 20:06:03][356729404491924][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:06:03][356729404491924][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 31034 4990 24848020 217936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:06:03][356729404491924][301 ms][DEBUG] targetPkg: running [2025-09-08 20:06:03][356729404491924][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-08 20:06:03][356729404491924][301 ms][DEBUG] START check_boot_completed [2025-09-08 20:06:03][356729404491924][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:06:04][356729404491924][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 20:06:04][356729404491924][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:06:04][356729404491924][380 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 20:06:04][356729404491924][380 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 20:06:04][356729404491924][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:06:04][356729404491924][489 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4044\nsuccessfulTxPacketsPerSecond: 0.49446021426609277\nretriedTxPackets: 1005\nretriedTxPacketsPerSecond: 0.14650673015291638\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3570\nsuccessfulRxPacketsPerSecond: 0.43036351982419185\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:06:04][356729404491924][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:06:05][356729404491924][2004 ms][DEBUG] SU: done in 1515 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.288/198.288/198.288/0.000 ms\n [2025-09-08 20:06:05][356729404491924][2004 ms][DEBUG] check_internet: online [2025-09-08 20:06:05][356729404491924][2004 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:06:05][356729404491924][2004 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729404491924\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9336\"}'\'' -e'"" [2025-09-08 20:06:05][356729404491924][2004 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:06:05][356729404491924][2004 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729404491924\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9336\"}'\'' -e'"" [2025-09-08 20:06:10][356729404491924][6347 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5d66097-ed91-4a4c-9afc-1a8b5827c9f4","id":"QR_c5d66097-ed91-4a4c-9afc-1a8b5827c9f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:06:10][356729404491924][6503 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-09-08 20:06:10][356729404491924][6503 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-09-08 20:06:10][356729404491924][6503 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:06:12][356729404491924][1 ms][INFO] === Request start === [2025-09-08 20:06:12][356729404491924][1 ms][DEBUG] START check_scloud [2025-09-08 20:06:12][356729404491924][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:06:12][356729404491924][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 31034 4990 25013024 229716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:06:12][356729404491924][262 ms][DEBUG] targetPkg: running [2025-09-08 20:06:12][356729404491924][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-08 20:06:12][356729404491924][262 ms][DEBUG] START check_boot_completed [2025-09-08 20:06:12][356729404491924][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:06:12][356729404491924][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 20:06:12][356729404491924][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:06:12][356729404491924][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:06:12][356729404491924][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 20:06:12][356729404491924][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:06:12][356729404491924][481 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4044\nsuccessfulTxPacketsPerSecond: 0.49446021426609277\nretriedTxPackets: 1005\nretriedTxPacketsPerSecond: 0.14650673015291638\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3570\nsuccessfulRxPacketsPerSecond: 0.43036351982419185\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:06:12][356729404491924][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:06:13][356729404491924][793 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.158/203.158/203.158/0.000 ms\n [2025-09-08 20:06:13][356729404491924][794 ms][DEBUG] check_internet: online [2025-09-08 20:06:13][356729404491924][794 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:06:13][356729404491924][794 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729404491924\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4959\"}'\'' -e'"" [2025-09-08 20:06:13][356729404491924][794 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:06:13][356729404491924][794 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729404491924\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4959\"}'\'' -e'"" [2025-09-08 20:06:17][356729404491924][5433 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8a3a0be-d69a-4e6f-9356-62601e8da861","id":"QR_b8a3a0be-d69a-4e6f-9356-62601e8da861","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:06:18][356729404491924][5589 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-08 20:06:18][356729404491924][5589 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-08 20:06:18][356729404491924][5589 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:12:06][350865892431406][1 ms][INFO] === Request start === [2025-09-08 20:12:06][350865892431406][1 ms][DEBUG] START check_scloud [2025-09-08 20:12:06][350865892431406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:12:06][350865892431406][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 31034 4990 25112544 241320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:12:06][350865892431406][301 ms][DEBUG] targetPkg: running [2025-09-08 20:12:06][350865892431406][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-08 20:12:06][350865892431406][301 ms][DEBUG] START check_boot_completed [2025-09-08 20:12:06][350865892431406][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:12:06][350865892431406][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 20:12:06][350865892431406][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:12:07][350865892431406][380 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 20:12:07][350865892431406][380 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 20:12:07][350865892431406][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:12:07][350865892431406][520 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=38094 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4165\nsuccessfulTxPacketsPerSecond: 0.39329640897625917\nretriedTxPackets: 1044\nretriedTxPacketsPerSecond: 0.12676495826507528\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3674\nsuccessfulRxPacketsPerSecond: 0.3380398887068674\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:12:07][350865892431406][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:12:08][350865892431406][2066 ms][DEBUG] SU: done in 1546 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.631/203.631/203.631/0.000 ms\n [2025-09-08 20:12:08][350865892431406][2066 ms][DEBUG] check_internet: online [2025-09-08 20:12:08][350865892431406][2066 ms][DEBUG] rawBody.length=1170 [2025-09-08 20:12:08][350865892431406][2067 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350865892431406\",\"model\":\"SM-X510\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX2XC00RT6N\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6079\"}'\'' -e'"" [2025-09-08 20:12:08][350865892431406][2067 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:12:08][350865892431406][2067 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350865892431406\",\"model\":\"SM-X510\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX2XC00RT6N\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6079\"}'\'' -e'"" [2025-09-08 20:12:16][350865892431406][9721 ms][DEBUG] proc_open done in 7654 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 20:12:16][350865892431406][9721 ms][DEBUG] END runCmdUntilRes#1 in 7655 ms [2025-09-08 20:12:16][350865892431406][9721 ms][WARN] Detected error: Process with pid 31034 either refused to load frida-agent, or terminated during injectionProcess with pid 31034 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 20:12:16][350865892431406][9721 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 20:12:16][350865892431406][10174 ms][DEBUG] SU: done in 452 ms; out [2025-09-08 20:12:16][350865892431406][10174 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 20:12:17][350865892431406][10674 ms][DEBUG] SU: done in 500 ms; out [2025-09-08 20:12:17][350865892431406][10674 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 20:12:17][350865892431406][10674 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 20:12:17][350865892431406][10908 ms][DEBUG] SU: done in 234 ms; out [2025-09-08 20:12:17][350865892431406][10908 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 20:12:17][350865892431406][11174 ms][DEBUG] SU: done in 266 ms; out [2025-09-08 20:12:19][350865892431406][13188 ms][DEBUG] START check_boot_completed [2025-09-08 20:12:19][350865892431406][13189 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:12:19][350865892431406][13235 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 20:12:19][350865892431406][13235 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:12:19][350865892431406][13298 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 20:12:19][350865892431406][13298 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 20:12:22][350865892431406][16313 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 20:12:22][350865892431406][16313 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350865892431406\",\"model\":\"SM-X510\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX2XC00RT6N\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6079\"}'\'' -e'"" [2025-09-08 20:12:23][350865892431406][16828 ms][DEBUG] proc_open done in 516 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-08 20:12:23][350865892431406][16829 ms][DEBUG] END runCmdUntilRes#2 in 516 ms [2025-09-08 20:12:23][350865892431406][16829 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-08 20:12:23][350865892431406][16829 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 20:12:23][350865892431406][17344 ms][DEBUG] SU: done in 515 ms; out [2025-09-08 20:13:06][352980105819699][0 ms][INFO] === Request start === [2025-09-08 20:13:06][352980105819699][1 ms][DEBUG] START check_scloud [2025-09-08 20:13:06][352980105819699][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:13:06][352980105819699][408 ms][DEBUG] SU: done in 407 ms; out [2025-09-08 20:13:06][352980105819699][408 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 20:13:06][352980105819699][439 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 20:13:06][352980105819699][439 ms][DEBUG] check_devices: device found [2025-09-08 20:13:06][352980105819699][439 ms][WARN] targetPkg: not running, restarting [2025-09-08 20:13:06][352980105819699][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 20:13:06][352980105819699][580 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 20:13:06][352980105819699][580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 20:13:06][352980105819699][783 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 20:13:08][352980105819699][2798 ms][DEBUG] END check_scloud in 2797 ms [2025-09-08 20:13:08][352980105819699][2798 ms][DEBUG] START check_boot_completed [2025-09-08 20:13:08][352980105819699][2798 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:13:08][352980105819699][2845 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 20:13:08][352980105819699][2845 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:13:08][352980105819699][2892 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:13:08][352980105819699][2892 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 20:13:08][352980105819699][2892 ms][DEBUG] rawBody.length=1170 [2025-09-08 20:13:08][352980105819699][2892 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352980105819699\",\"model\":\"SM-X510\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX2XC00RT6N\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5564\"}'\'' -e'"" [2025-09-08 20:13:08][352980105819699][2892 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:13:08][352980105819699][2892 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352980105819699\",\"model\":\"SM-X510\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX2XC00RT6N\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5564\"}'\'' -e'"" [2025-09-08 20:13:16][352980105819699][10827 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a33f4d7-9f96-4ef9-9cb8-b231596f571c","id":"QR_5a33f4d7-9f96-4ef9-9cb8-b231596f571c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:13:17][352980105819699][10984 ms][DEBUG] proc_open done in 8092 ms; code=255; res.len=3343 [2025-09-08 20:13:17][352980105819699][10984 ms][DEBUG] END runCmdUntilRes#1 in 8092 ms [2025-09-08 20:13:17][352980105819699][10984 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:18:04][357463821250213][1 ms][INFO] === Request start === [2025-09-08 20:18:04][357463821250213][1 ms][DEBUG] START check_scloud [2025-09-08 20:18:04][357463821250213][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:18:05][357463821250213][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 4682 817 23620908 65552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:18:05][357463821250213][326 ms][DEBUG] targetPkg: running [2025-09-08 20:18:05][357463821250213][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-08 20:18:05][357463821250213][326 ms][DEBUG] START check_boot_completed [2025-09-08 20:18:05][357463821250213][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:18:05][357463821250213][357 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 20:18:05][357463821250213][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:18:05][357463821250213][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:18:05][357463821250213][404 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 20:18:05][357463821250213][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:18:05][357463821250213][513 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1080\nsuccessfulTxPacketsPerSecond: 2.722905802871895\nretriedTxPackets: 174\nretriedTxPacketsPerSecond: 0.3999955963787555\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1136\nsuccessfulRxPacketsPerSecond: 3.0751955024348354\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:18:05][357463821250213][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:18:06][357463821250213][2232 ms][DEBUG] SU: done in 1718 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.792/201.792/201.792/0.000 ms\n [2025-09-08 20:18:06][357463821250213][2232 ms][DEBUG] check_internet: online [2025-09-08 20:18:06][357463821250213][2232 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:18:06][357463821250213][2232 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357463821250213\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5038\"}'\'' -e'"" [2025-09-08 20:18:06][357463821250213][2232 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:18:06][357463821250213][2232 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357463821250213\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5038\"}'\'' -e'"" [2025-09-08 20:18:12][357463821250213][7590 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d811bd5d-a1e6-4a1a-a5c8-b5b1879538e4","id":"QR_d811bd5d-a1e6-4a1a-a5c8-b5b1879538e4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:18:12][357463821250213][7746 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-08 20:18:12][357463821250213][7746 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-08 20:18:12][357463821250213][7746 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:18:15][357463821250213][0 ms][INFO] === Request start === [2025-09-08 20:18:15][357463821250213][1 ms][DEBUG] START check_scloud [2025-09-08 20:18:15][357463821250213][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:18:16][357463821250213][341 ms][DEBUG] SU: done in 340 ms; outu0_a118 4682 817 23763380 87304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:18:16][357463821250213][341 ms][DEBUG] targetPkg: running [2025-09-08 20:18:16][357463821250213][341 ms][DEBUG] END check_scloud in 340 ms [2025-09-08 20:18:16][357463821250213][341 ms][DEBUG] START check_boot_completed [2025-09-08 20:18:16][357463821250213][341 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:18:16][357463821250213][388 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 20:18:16][357463821250213][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:18:16][357463821250213][481 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 20:18:16][357463821250213][481 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 20:18:16][357463821250213][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:18:16][357463821250213][638 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1080\nsuccessfulTxPacketsPerSecond: 2.722905802871895\nretriedTxPackets: 174\nretriedTxPacketsPerSecond: 0.3999955963787555\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1136\nsuccessfulRxPacketsPerSecond: 3.0751955024348354\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:18:16][357463821250213][638 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:18:16][357463821250213][965 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.113) 56(84) bytes of data.\n64 bytes from bi-in-f113.1e100.net (172.253.63.113): icmp_seq=1 ttl=106 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.165/175.165/175.165/0.000 ms\n [2025-09-08 20:18:16][357463821250213][965 ms][DEBUG] check_internet: online [2025-09-08 20:18:16][357463821250213][965 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:18:16][357463821250213][965 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357463821250213\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8331\"}'\'' -e'"" [2025-09-08 20:18:16][357463821250213][965 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:18:16][357463821250213][965 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357463821250213\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8331\"}'\'' -e'"" [2025-09-08 20:18:21][357463821250213][5746 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab2b6403-5c17-402b-ba88-bbc038886904","id":"QR_ab2b6403-5c17-402b-ba88-bbc038886904","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:18:21][357463821250213][5902 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-08 20:18:21][357463821250213][5902 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-08 20:18:21][357463821250213][5902 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:19:05][354314902483210][0 ms][INFO] === Request start === [2025-09-08 20:19:05][354314902483210][1 ms][DEBUG] START check_scloud [2025-09-08 20:19:05][354314902483210][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:19:05][354314902483210][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 4682 817 23872948 99140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:19:05][354314902483210][324 ms][DEBUG] targetPkg: running [2025-09-08 20:19:05][354314902483210][324 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 20:19:05][354314902483210][324 ms][DEBUG] START check_boot_completed [2025-09-08 20:19:05][354314902483210][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:19:05][354314902483210][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 20:19:05][354314902483210][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:19:05][354314902483210][418 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:19:05][354314902483210][418 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 20:19:05][354314902483210][418 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:19:05][354314902483210][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314902483210\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4268\"}'\'' -e'"" [2025-09-08 20:19:05][354314902483210][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:19:05][354314902483210][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314902483210\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4268\"}'\'' -e'"" [2025-09-08 20:19:10][354314902483210][5495 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23cae0d8-2e39-4c3d-a3cf-72fad62b7e50","id":"QR_23cae0d8-2e39-4c3d-a3cf-72fad62b7e50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:19:10][354314902483210][5651 ms][DEBUG] proc_open done in 5232 ms; code=255; res.len=3343 [2025-09-08 20:19:10][354314902483210][5651 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-08 20:19:10][354314902483210][5651 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:19:14][354314902483210][0 ms][INFO] === Request start === [2025-09-08 20:19:14][354314902483210][1 ms][DEBUG] START check_scloud [2025-09-08 20:19:14][354314902483210][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:19:14][354314902483210][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 4682 817 23994940 110216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:19:14][354314902483210][320 ms][DEBUG] targetPkg: running [2025-09-08 20:19:14][354314902483210][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 20:19:14][354314902483210][320 ms][DEBUG] START check_boot_completed [2025-09-08 20:19:14][354314902483210][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:19:14][354314902483210][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 20:19:14][354314902483210][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:19:14][354314902483210][399 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 20:19:14][354314902483210][399 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 20:19:14][354314902483210][399 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:19:14][354314902483210][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314902483210\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8201\"}'\'' -e'"" [2025-09-08 20:19:14][354314902483210][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:19:14][354314902483210][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314902483210\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8201\"}'\'' -e'"" [2025-09-08 20:19:18][354314902483210][3772 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da55f871-c57d-4833-9d5b-24e6b927683d","id":"QR_da55f871-c57d-4833-9d5b-24e6b927683d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:19:18][354314902483210][3928 ms][DEBUG] proc_open done in 3529 ms; code=255; res.len=3343 [2025-09-08 20:19:18][354314902483210][3928 ms][DEBUG] END runCmdUntilRes#1 in 3529 ms [2025-09-08 20:19:18][354314902483210][3928 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:28:05][350915064167526][1 ms][INFO] === Request start === [2025-09-08 20:28:05][350915064167526][1 ms][DEBUG] START check_scloud [2025-09-08 20:28:05][350915064167526][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:28:05][350915064167526][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 4682 817 24126000 117872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:28:05][350915064167526][330 ms][DEBUG] targetPkg: running [2025-09-08 20:28:05][350915064167526][330 ms][DEBUG] END check_scloud in 329 ms [2025-09-08 20:28:05][350915064167526][330 ms][DEBUG] START check_boot_completed [2025-09-08 20:28:05][350915064167526][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:28:05][350915064167526][361 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 20:28:05][350915064167526][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:28:05][350915064167526][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:28:05][350915064167526][408 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 20:28:05][350915064167526][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:28:05][350915064167526][518 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1336\nsuccessfulTxPacketsPerSecond: 0.2822794899043571\nretriedTxPackets: 238\nretriedTxPacketsPerSecond: 0.06309776833156217\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1362\nsuccessfulRxPacketsPerSecond: 0.2457492029755579\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:28:05][350915064167526][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:28:06][350915064167526][1925 ms][DEBUG] SU: done in 1407 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.635/198.635/198.635/0.000 ms\n [2025-09-08 20:28:06][350915064167526][1925 ms][DEBUG] check_internet: online [2025-09-08 20:28:06][350915064167526][1925 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:28:06][350915064167526][1926 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915064167526\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3279\"}'\'' -e'"" [2025-09-08 20:28:06][350915064167526][1926 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:28:06][350915064167526][1926 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915064167526\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3279\"}'\'' -e'"" [2025-09-08 20:28:12][350915064167526][7188 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_90b2b92c-ff16-494d-b74c-5d89a21e2a0a","id":"QR_90b2b92c-ff16-494d-b74c-5d89a21e2a0a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:28:12][350915064167526][7344 ms][DEBUG] proc_open done in 5418 ms; code=255; res.len=3343 [2025-09-08 20:28:12][350915064167526][7344 ms][DEBUG] END runCmdUntilRes#1 in 5418 ms [2025-09-08 20:28:12][350915064167526][7344 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:28:15][350915064167526][0 ms][INFO] === Request start === [2025-09-08 20:28:15][350915064167526][1 ms][DEBUG] START check_scloud [2025-09-08 20:28:15][350915064167526][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:28:16][350915064167526][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 4682 817 24291140 129464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:28:16][350915064167526][328 ms][DEBUG] targetPkg: running [2025-09-08 20:28:16][350915064167526][328 ms][DEBUG] END check_scloud in 327 ms [2025-09-08 20:28:16][350915064167526][328 ms][DEBUG] START check_boot_completed [2025-09-08 20:28:16][350915064167526][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:28:16][350915064167526][374 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 20:28:16][350915064167526][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:28:16][350915064167526][422 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:28:16][350915064167526][422 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 20:28:16][350915064167526][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:28:16][350915064167526][577 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1336\nsuccessfulTxPacketsPerSecond: 0.2822794899043571\nretriedTxPackets: 238\nretriedTxPacketsPerSecond: 0.06309776833156217\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1362\nsuccessfulRxPacketsPerSecond: 0.2457492029755579\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:28:16][350915064167526][578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:28:16][350915064167526][890 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=210 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 210.231/210.231/210.231/0.000 ms\n [2025-09-08 20:28:16][350915064167526][890 ms][DEBUG] check_internet: online [2025-09-08 20:28:16][350915064167526][890 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:28:16][350915064167526][890 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915064167526\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9721\"}'\'' -e'"" [2025-09-08 20:28:16][350915064167526][890 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:28:16][350915064167526][890 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915064167526\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9721\"}'\'' -e'"" [2025-09-08 20:28:20][350915064167526][4764 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_590d08e2-d1f5-439d-b5ce-26e3254bf2a2","id":"QR_590d08e2-d1f5-439d-b5ce-26e3254bf2a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:28:20][350915064167526][4920 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-08 20:28:20][350915064167526][4920 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-08 20:28:20][350915064167526][4920 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:28:23][357651715981345][0 ms][INFO] === Request start === [2025-09-08 20:28:23][357651715981345][1 ms][DEBUG] START check_scloud [2025-09-08 20:28:23][357651715981345][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:28:24][357651715981345][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 4682 817 24435276 140024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:28:24][357651715981345][326 ms][DEBUG] targetPkg: running [2025-09-08 20:28:24][357651715981345][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-08 20:28:24][357651715981345][326 ms][DEBUG] START check_boot_completed [2025-09-08 20:28:24][357651715981345][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:28:24][357651715981345][357 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 20:28:24][357651715981345][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:28:24][357651715981345][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:28:24][357651715981345][404 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 20:28:24][357651715981345][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:28:24][357651715981345][514 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1336\nsuccessfulTxPacketsPerSecond: 0.2822794899043571\nretriedTxPackets: 238\nretriedTxPacketsPerSecond: 0.06309776833156217\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1362\nsuccessfulRxPacketsPerSecond: 0.2457492029755579\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:28:24][357651715981345][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:28:24][357651715981345][841 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.839/214.839/214.839/0.000 ms\n [2025-09-08 20:28:24][357651715981345][842 ms][DEBUG] check_internet: online [2025-09-08 20:28:24][357651715981345][842 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:28:24][357651715981345][842 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651715981345\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5747\"}'\'' -e'"" [2025-09-08 20:28:24][357651715981345][842 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:28:24][357651715981345][842 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651715981345\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5747\"}'\'' -e'"" [2025-09-08 20:28:29][357651715981345][5590 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ef79b45-2aac-4711-957d-9ce96416219b","id":"QR_0ef79b45-2aac-4711-957d-9ce96416219b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:28:29][357651715981345][5746 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-08 20:28:29][357651715981345][5747 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-08 20:28:29][357651715981345][5747 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:28:33][357651715981345][0 ms][INFO] === Request start === [2025-09-08 20:28:33][357651715981345][1 ms][DEBUG] START check_scloud [2025-09-08 20:28:33][357651715981345][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:28:33][357651715981345][291 ms][DEBUG] SU: done in 291 ms; outu0_a118 4682 817 24559408 152076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:28:33][357651715981345][292 ms][DEBUG] targetPkg: running [2025-09-08 20:28:33][357651715981345][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-08 20:28:33][357651715981345][292 ms][DEBUG] START check_boot_completed [2025-09-08 20:28:33][357651715981345][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:28:33][357651715981345][338 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 20:28:33][357651715981345][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:28:33][357651715981345][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:28:33][357651715981345][385 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 20:28:33][357651715981345][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:28:33][357651715981345][495 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1336\nsuccessfulTxPacketsPerSecond: 0.2822794899043571\nretriedTxPackets: 238\nretriedTxPacketsPerSecond: 0.06309776833156217\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1362\nsuccessfulRxPacketsPerSecond: 0.2457492029755579\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:28:33][357651715981345][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:28:33][357651715981345][807 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=207 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 207.380/207.380/207.380/0.000 ms\n [2025-09-08 20:28:33][357651715981345][807 ms][DEBUG] check_internet: online [2025-09-08 20:28:33][357651715981345][807 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:28:33][357651715981345][807 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651715981345\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7670\"}'\'' -e'"" [2025-09-08 20:28:33][357651715981345][807 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:28:33][357651715981345][807 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651715981345\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7670\"}'\'' -e'"" [2025-09-08 20:28:37][357651715981345][4415 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48559135-3782-47c4-8aae-ae2e6dc7dfd1","id":"QR_48559135-3782-47c4-8aae-ae2e6dc7dfd1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:28:37][357651715981345][4572 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-09-08 20:28:37][357651715981345][4572 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-08 20:28:37][357651715981345][4572 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:30:05][350603387257576][1 ms][INFO] === Request start === [2025-09-08 20:30:05][350603387257576][1 ms][DEBUG] START check_scloud [2025-09-08 20:30:05][350603387257576][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:30:05][350603387257576][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 4682 817 24650572 164248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:30:05][350603387257576][319 ms][DEBUG] targetPkg: running [2025-09-08 20:30:05][350603387257576][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-08 20:30:05][350603387257576][319 ms][DEBUG] START check_boot_completed [2025-09-08 20:30:05][350603387257576][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:30:05][350603387257576][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 20:30:05][350603387257576][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:30:05][350603387257576][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:30:05][350603387257576][413 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 20:30:05][350603387257576][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:30:06][350603387257576][524 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1336\nsuccessfulTxPacketsPerSecond: 0.2822794899043571\nretriedTxPackets: 238\nretriedTxPacketsPerSecond: 0.06309776833156217\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1362\nsuccessfulRxPacketsPerSecond: 0.2457492029755579\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:30:06][350603387257576][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:30:06][350603387257576][928 ms][DEBUG] SU: done in 404 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=280 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 280.679/280.679/280.679/0.000 ms\n [2025-09-08 20:30:06][350603387257576][928 ms][DEBUG] check_internet: online [2025-09-08 20:30:06][350603387257576][928 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:30:06][350603387257576][928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603387257576\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1892\"}'\'' -e'"" [2025-09-08 20:30:06][350603387257576][928 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:30:06][350603387257576][928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603387257576\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1892\"}'\'' -e'"" [2025-09-08 20:30:12][350603387257576][6583 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f8a7896-063f-4a79-823b-4f8e3b7e9039","id":"QR_1f8a7896-063f-4a79-823b-4f8e3b7e9039","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:30:12][350603387257576][6739 ms][DEBUG] proc_open done in 5810 ms; code=255; res.len=3343 [2025-09-08 20:30:12][350603387257576][6739 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-09-08 20:30:12][350603387257576][6739 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:30:15][350603387257576][0 ms][INFO] === Request start === [2025-09-08 20:30:15][350603387257576][1 ms][DEBUG] START check_scloud [2025-09-08 20:30:15][350603387257576][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:30:16][350603387257576][270 ms][DEBUG] SU: done in 270 ms; outu0_a118 4682 817 24815572 169620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:30:16][350603387257576][270 ms][DEBUG] targetPkg: running [2025-09-08 20:30:16][350603387257576][270 ms][DEBUG] END check_scloud in 270 ms [2025-09-08 20:30:16][350603387257576][271 ms][DEBUG] START check_boot_completed [2025-09-08 20:30:16][350603387257576][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:30:16][350603387257576][317 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 20:30:16][350603387257576][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:30:16][350603387257576][364 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:30:16][350603387257576][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 20:30:16][350603387257576][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:30:16][350603387257576][474 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1480\nsuccessfulTxPacketsPerSecond: 1.1043198846599231\nretriedTxPackets: 275\nretriedTxPacketsPerSecond: 0.28374885925289695\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1491\nsuccessfulRxPacketsPerSecond: 0.9892865633411811\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:30:16][350603387257576][474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:30:16][350603387257576][786 ms][DEBUG] SU: done in 312 ms; outPING google.com (172.253.63.138) 56(84) bytes of data.\n64 bytes from bi-in-f138.1e100.net (172.253.63.138): icmp_seq=1 ttl=106 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.705/202.705/202.705/0.000 ms\n [2025-09-08 20:30:16][350603387257576][786 ms][DEBUG] check_internet: online [2025-09-08 20:30:16][350603387257576][786 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:30:16][350603387257576][786 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603387257576\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1332\"}'\'' -e'"" [2025-09-08 20:30:16][350603387257576][786 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:30:16][350603387257576][786 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603387257576\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1332\"}'\'' -e'"" [2025-09-08 20:30:20][350603387257576][4691 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2410f37-1a69-4455-8e13-a30dbd36ba3c","id":"QR_b2410f37-1a69-4455-8e13-a30dbd36ba3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:30:20][350603387257576][4847 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-08 20:30:20][350603387257576][4847 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-08 20:30:20][350603387257576][4847 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:34:03][350300272630153][1 ms][INFO] === Request start === [2025-09-08 20:34:03][350300272630153][1 ms][DEBUG] START check_scloud [2025-09-08 20:34:03][350300272630153][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:34:03][350300272630153][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 4682 817 24931348 173048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:34:03][350300272630153][288 ms][DEBUG] targetPkg: running [2025-09-08 20:34:03][350300272630153][289 ms][DEBUG] END check_scloud in 287 ms [2025-09-08 20:34:03][350300272630153][289 ms][DEBUG] START check_boot_completed [2025-09-08 20:34:03][350300272630153][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:34:03][350300272630153][318 ms][DEBUG] ADB: done in 29 ms; out [2025-09-08 20:34:03][350300272630153][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:34:03][350300272630153][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:34:03][350300272630153][365 ms][DEBUG] END check_boot_completed in 76 ms [2025-09-08 20:34:03][350300272630153][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:34:03][350300272630153][506 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1480\nsuccessfulTxPacketsPerSecond: 1.1043198846599231\nretriedTxPackets: 275\nretriedTxPacketsPerSecond: 0.28374885925289695\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1491\nsuccessfulRxPacketsPerSecond: 0.9892865633411811\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:34:03][350300272630153][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:34:05][350300272630153][2225 ms][DEBUG] SU: done in 1719 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.974/198.974/198.974/0.000 ms\n [2025-09-08 20:34:05][350300272630153][2226 ms][DEBUG] check_internet: online [2025-09-08 20:34:05][350300272630153][2226 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:34:05][350300272630153][2226 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350300272630153\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5240\"}'\'' -e'"" [2025-09-08 20:34:05][350300272630153][2226 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:34:05][350300272630153][2226 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350300272630153\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5240\"}'\'' -e'"" [2025-09-08 20:34:10][350300272630153][6676 ms][DEBUG] proc_open done in 4450 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-08 20:34:10][350300272630153][6676 ms][DEBUG] END runCmdUntilRes#1 in 4450 ms [2025-09-08 20:34:10][350300272630153][6676 ms][WARN] Detected error: Process with pid 4682 either refused to load frida-agent, or terminated during injectionProcess with pid 4682 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 20:34:10][350300272630153][6676 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 20:34:10][350300272630153][6910 ms][DEBUG] SU: done in 234 ms; outsystem 1031 817 12853736 257400 ep_poll 0 S system_server\n [2025-09-08 20:34:10][350300272630153][6910 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 20:34:10][350300272630153][7051 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 20:34:10][350300272630153][7051 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 20:34:10][350300272630153][7051 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 20:34:10][350300272630153][7207 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 20:34:10][350300272630153][7207 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 20:34:10][350300272630153][7395 ms][DEBUG] SU: done in 188 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 20:34:12][350300272630153][9409 ms][DEBUG] START check_boot_completed [2025-09-08 20:34:12][350300272630153][9410 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:34:12][350300272630153][9456 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 20:34:12][350300272630153][9456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:34:12][350300272630153][9503 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:34:12][350300272630153][9503 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 20:34:15][350300272630153][12518 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 20:34:15][350300272630153][12518 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350300272630153\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5240\"}'\'' -e'"" [2025-09-08 20:34:19][350300272630153][16377 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dbd28b09-6efc-4c6c-952c-f61d03aded9d","id":"QR_dbd28b09-6efc-4c6c-952c-f61d03aded9d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:34:19][350300272630153][16533 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-09-08 20:34:19][350300272630153][16533 ms][DEBUG] END runCmdUntilRes#2 in 4015 ms [2025-09-08 20:34:19][350300272630153][16533 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:34:22][350300272630153][0 ms][INFO] === Request start === [2025-09-08 20:34:22][350300272630153][1 ms][DEBUG] START check_scloud [2025-09-08 20:34:22][350300272630153][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:34:22][350300272630153][244 ms][DEBUG] SU: done in 244 ms; outu0_a118 14530 817 23693660 125932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:34:22][350300272630153][244 ms][DEBUG] targetPkg: running [2025-09-08 20:34:22][350300272630153][245 ms][DEBUG] END check_scloud in 244 ms [2025-09-08 20:34:22][350300272630153][245 ms][DEBUG] START check_boot_completed [2025-09-08 20:34:22][350300272630153][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:34:22][350300272630153][290 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 20:34:22][350300272630153][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:34:22][350300272630153][352 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 20:34:22][350300272630153][352 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 20:34:22][350300272630153][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:34:22][350300272630153][493 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1480\nsuccessfulTxPacketsPerSecond: 1.1043198846599231\nretriedTxPackets: 275\nretriedTxPacketsPerSecond: 0.28374885925289695\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1491\nsuccessfulRxPacketsPerSecond: 0.9892865633411811\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:34:22][350300272630153][494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:34:23][350300272630153][867 ms][DEBUG] SU: done in 374 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=263 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 263.036/263.036/263.036/0.000 ms\n [2025-09-08 20:34:23][350300272630153][867 ms][DEBUG] check_internet: online [2025-09-08 20:34:23][350300272630153][867 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:34:23][350300272630153][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350300272630153\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8720\"}'\'' -e'"" [2025-09-08 20:34:23][350300272630153][867 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:34:23][350300272630153][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350300272630153\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8720\"}'\'' -e'"" [2025-09-08 20:34:28][350300272630153][6210 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_025041e4-344f-4fda-a2f1-9188db49ed94","id":"QR_025041e4-344f-4fda-a2f1-9188db49ed94","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:34:28][350300272630153][6366 ms][DEBUG] proc_open done in 5499 ms; code=255; res.len=3343 [2025-09-08 20:34:28][350300272630153][6366 ms][DEBUG] END runCmdUntilRes#1 in 5499 ms [2025-09-08 20:34:28][350300272630153][6366 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:41:03][354715950715578][1 ms][INFO] === Request start === [2025-09-08 20:41:03][354715950715578][1 ms][DEBUG] START check_scloud [2025-09-08 20:41:03][354715950715578][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:41:04][354715950715578][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 14530 817 23753472 139476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:41:04][354715950715578][303 ms][DEBUG] targetPkg: running [2025-09-08 20:41:04][354715950715578][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 20:41:04][354715950715578][303 ms][DEBUG] START check_boot_completed [2025-09-08 20:41:04][354715950715578][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:41:04][354715950715578][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 20:41:04][354715950715578][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:41:04][354715950715578][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:41:04][354715950715578][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 20:41:04][354715950715578][381 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:41:04][354715950715578][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354715950715578\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6801\"}'\'' -e'"" [2025-09-08 20:41:04][354715950715578][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:41:04][354715950715578][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354715950715578\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6801\"}'\'' -e'"" [2025-09-08 20:41:08][354715950715578][5052 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4cd7b3d-334e-4466-8cc2-74043e732384","id":"QR_c4cd7b3d-334e-4466-8cc2-74043e732384","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:41:08][354715950715578][5208 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-08 20:41:08][354715950715578][5208 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-08 20:41:08][354715950715578][5208 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:41:11][354715950715578][0 ms][INFO] === Request start === [2025-09-08 20:41:11][354715950715578][1 ms][DEBUG] START check_scloud [2025-09-08 20:41:11][354715950715578][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:41:11][354715950715578][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 14530 817 23927892 151552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:41:11][354715950715578][309 ms][DEBUG] targetPkg: running [2025-09-08 20:41:11][354715950715578][309 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 20:41:11][354715950715578][309 ms][DEBUG] START check_boot_completed [2025-09-08 20:41:11][354715950715578][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:41:11][354715950715578][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 20:41:11][354715950715578][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:41:11][354715950715578][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 20:41:11][354715950715578][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 20:41:11][354715950715578][419 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:41:11][354715950715578][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354715950715578\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1891\"}'\'' -e'"" [2025-09-08 20:41:11][354715950715578][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:41:11][354715950715578][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354715950715578\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1891\"}'\'' -e'"" [2025-09-08 20:41:16][354715950715578][5527 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6307f984-0a10-46ed-9d19-92828e56d841","id":"QR_6307f984-0a10-46ed-9d19-92828e56d841","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:41:17][354715950715578][5683 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-08 20:41:17][354715950715578][5683 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-09-08 20:41:17][354715950715578][5683 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:42:04][354239343513624][0 ms][INFO] === Request start === [2025-09-08 20:42:04][354239343513624][1 ms][DEBUG] START check_scloud [2025-09-08 20:42:04][354239343513624][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:42:05][354239343513624][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 14530 817 24054100 162632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:42:05][354239343513624][305 ms][DEBUG] targetPkg: running [2025-09-08 20:42:05][354239343513624][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 20:42:05][354239343513624][305 ms][DEBUG] START check_boot_completed [2025-09-08 20:42:05][354239343513624][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:42:05][354239343513624][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 20:42:05][354239343513624][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:42:05][354239343513624][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:42:05][354239343513624][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 20:42:05][354239343513624][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:42:05][354239343513624][493 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1713\nsuccessfulTxPacketsPerSecond: 0.16610523098593422\nretriedTxPackets: 333\nretriedTxPacketsPerSecond: 0.03322104619718684\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1697\nsuccessfulRxPacketsPerSecond: 0.15281681250705947\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:42:05][354239343513624][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:42:06][354239343513624][2242 ms][DEBUG] SU: done in 1749 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.238/198.238/198.238/0.000 ms\n [2025-09-08 20:42:06][354239343513624][2242 ms][DEBUG] check_internet: online [2025-09-08 20:42:06][354239343513624][2242 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:42:06][354239343513624][2242 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354239343513624\",\"model\":\"SM-X218U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2027\"}'\'' -e'"" [2025-09-08 20:42:06][354239343513624][2242 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:42:06][354239343513624][2242 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354239343513624\",\"model\":\"SM-X218U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2027\"}'\'' -e'"" [2025-09-08 20:42:11][354239343513624][6991 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9adc27a-4a5e-4512-85b6-28d391140525","id":"QR_d9adc27a-4a5e-4512-85b6-28d391140525","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:42:11][354239343513624][7147 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-08 20:42:11][354239343513624][7147 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-08 20:42:11][354239343513624][7147 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:42:15][354239343513624][0 ms][INFO] === Request start === [2025-09-08 20:42:15][354239343513624][1 ms][DEBUG] START check_scloud [2025-09-08 20:42:15][354239343513624][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:42:15][354239343513624][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 14530 817 24208988 173452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:42:15][354239343513624][315 ms][DEBUG] targetPkg: running [2025-09-08 20:42:15][354239343513624][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 20:42:15][354239343513624][315 ms][DEBUG] START check_boot_completed [2025-09-08 20:42:15][354239343513624][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:42:15][354239343513624][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 20:42:15][354239343513624][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:42:15][354239343513624][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:42:15][354239343513624][409 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 20:42:15][354239343513624][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:42:15][354239343513624][518 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1713\nsuccessfulTxPacketsPerSecond: 0.16610523098593422\nretriedTxPackets: 333\nretriedTxPacketsPerSecond: 0.03322104619718684\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1697\nsuccessfulRxPacketsPerSecond: 0.15281681250705947\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:42:15][354239343513624][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:42:16][354239343513624][784 ms][DEBUG] SU: done in 266 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.059/163.059/163.059/0.000 ms\n [2025-09-08 20:42:16][354239343513624][784 ms][DEBUG] check_internet: online [2025-09-08 20:42:16][354239343513624][784 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:42:16][354239343513624][784 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354239343513624\",\"model\":\"SM-X218U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5437\"}'\'' -e'"" [2025-09-08 20:42:16][354239343513624][784 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:42:16][354239343513624][784 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354239343513624\",\"model\":\"SM-X218U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5437\"}'\'' -e'"" [2025-09-08 20:42:20][354239343513624][4658 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7200ee39-02e8-454e-8467-6bc9ab066e5d","id":"QR_7200ee39-02e8-454e-8467-6bc9ab066e5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:42:20][354239343513624][4814 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-08 20:42:20][354239343513624][4814 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-08 20:42:20][354239343513624][4814 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:44:04][350341125615496][1 ms][INFO] === Request start === [2025-09-08 20:44:04][350341125615496][1 ms][DEBUG] START check_scloud [2025-09-08 20:44:04][350341125615496][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:44:05][350341125615496][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 14530 817 24337180 185076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:44:05][350341125615496][314 ms][DEBUG] targetPkg: running [2025-09-08 20:44:05][350341125615496][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 20:44:05][350341125615496][314 ms][DEBUG] START check_boot_completed [2025-09-08 20:44:05][350341125615496][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:44:05][350341125615496][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 20:44:05][350341125615496][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:44:05][350341125615496][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:44:05][350341125615496][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 20:44:05][350341125615496][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:44:05][350341125615496][517 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1830\nsuccessfulTxPacketsPerSecond: 0.8706976744186047\nretriedTxPackets: 360\nretriedTxPacketsPerSecond: 0.20093023255813955\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1803\nsuccessfulRxPacketsPerSecond: 0.7888372093023256\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:44:05][350341125615496][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:44:05][350341125615496][923 ms][DEBUG] SU: done in 406 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=270 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 270.782/270.782/270.782/0.000 ms\n [2025-09-08 20:44:05][350341125615496][923 ms][DEBUG] check_internet: online [2025-09-08 20:44:05][350341125615496][923 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:44:05][350341125615496][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341125615496\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4684\"}'\'' -e'"" [2025-09-08 20:44:05][350341125615496][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:44:05][350341125615496][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341125615496\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4684\"}'\'' -e'"" [2025-09-08 20:44:11][350341125615496][6999 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9efa4409-7713-44cf-b930-67acd825d42e","id":"QR_9efa4409-7713-44cf-b930-67acd825d42e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:44:11][350341125615496][7156 ms][DEBUG] proc_open done in 6232 ms; code=255; res.len=3343 [2025-09-08 20:44:11][350341125615496][7156 ms][DEBUG] END runCmdUntilRes#1 in 6233 ms [2025-09-08 20:44:11][350341125615496][7156 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:44:15][350341125615496][0 ms][INFO] === Request start === [2025-09-08 20:44:15][350341125615496][0 ms][DEBUG] START check_scloud [2025-09-08 20:44:15][350341125615496][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:44:15][350341125615496][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 14530 817 24489892 195932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:44:15][350341125615496][285 ms][DEBUG] targetPkg: running [2025-09-08 20:44:15][350341125615496][285 ms][DEBUG] END check_scloud in 285 ms [2025-09-08 20:44:15][350341125615496][285 ms][DEBUG] START check_boot_completed [2025-09-08 20:44:15][350341125615496][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:44:15][350341125615496][331 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 20:44:15][350341125615496][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:44:15][350341125615496][394 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 20:44:15][350341125615496][394 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 20:44:15][350341125615496][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:44:15][350341125615496][535 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1830\nsuccessfulTxPacketsPerSecond: 0.8706976744186047\nretriedTxPackets: 360\nretriedTxPacketsPerSecond: 0.20093023255813955\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1803\nsuccessfulRxPacketsPerSecond: 0.7888372093023256\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:44:15][350341125615496][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:44:16][350341125615496][909 ms][DEBUG] SU: done in 375 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=265 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 265.751/265.751/265.751/0.000 ms\n [2025-09-08 20:44:16][350341125615496][909 ms][DEBUG] check_internet: online [2025-09-08 20:44:16][350341125615496][909 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:44:16][350341125615496][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341125615496\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1039\"}'\'' -e'"" [2025-09-08 20:44:16][350341125615496][909 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:44:16][350341125615496][909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341125615496\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1039\"}'\'' -e'"" [2025-09-08 20:44:19][350341125615496][4612 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_16a985b1-348d-41d5-9d38-c5452e53d7bd","id":"QR_16a985b1-348d-41d5-9d38-c5452e53d7bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:44:20][350341125615496][4768 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-08 20:44:20][350341125615496][4768 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-08 20:44:20][350341125615496][4768 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:52:04][351285621612292][1 ms][INFO] === Request start === [2025-09-08 20:52:04][351285621612292][1 ms][DEBUG] START check_scloud [2025-09-08 20:52:04][351285621612292][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:52:04][351285621612292][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 14530 817 24563736 206992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:52:04][351285621612292][306 ms][DEBUG] targetPkg: running [2025-09-08 20:52:04][351285621612292][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 20:52:04][351285621612292][306 ms][DEBUG] START check_boot_completed [2025-09-08 20:52:04][351285621612292][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:52:04][351285621612292][337 ms][DEBUG] ADB: done in 30 ms; out [2025-09-08 20:52:04][351285621612292][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:52:04][351285621612292][384 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 20:52:04][351285621612292][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 20:52:04][351285621612292][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:52:04][351285621612292][509 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1964\nsuccessfulTxPacketsPerSecond: 0.17021276595744755\nretriedTxPackets: 397\nretriedTxPacketsPerSecond: 0.040050062578223015\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1920\nsuccessfulRxPacketsPerSecond: 0.15018773466833607\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:52:04][351285621612292][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:52:06][351285621612292][2227 ms][DEBUG] SU: done in 1718 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.102/201.102/201.102/0.000 ms\n [2025-09-08 20:52:06][351285621612292][2227 ms][DEBUG] check_internet: online [2025-09-08 20:52:06][351285621612292][2227 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:52:06][351285621612292][2227 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285621612292\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1957\"}'\'' -e'"" [2025-09-08 20:52:06][351285621612292][2228 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:52:06][351285621612292][2228 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285621612292\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1957\"}'\'' -e'"" [2025-09-08 20:52:11][351285621612292][7585 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac3aef95-fe83-45a8-97ff-b0e6fa226c6e","id":"QR_ac3aef95-fe83-45a8-97ff-b0e6fa226c6e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:52:12][351285621612292][7741 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-09-08 20:52:12][351285621612292][7741 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-08 20:52:12][351285621612292][7741 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:52:15][351285621612292][0 ms][INFO] === Request start === [2025-09-08 20:52:15][351285621612292][1 ms][DEBUG] START check_scloud [2025-09-08 20:52:15][351285621612292][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:52:15][351285621612292][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 14530 817 24725868 198768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:52:15][351285621612292][283 ms][DEBUG] targetPkg: running [2025-09-08 20:52:15][351285621612292][283 ms][DEBUG] END check_scloud in 282 ms [2025-09-08 20:52:15][351285621612292][283 ms][DEBUG] START check_boot_completed [2025-09-08 20:52:15][351285621612292][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:52:15][351285621612292][329 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 20:52:15][351285621612292][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:52:16][351285621612292][392 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 20:52:16][351285621612292][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 20:52:16][351285621612292][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:52:16][351285621612292][517 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1964\nsuccessfulTxPacketsPerSecond: 0.17021276595744755\nretriedTxPackets: 397\nretriedTxPacketsPerSecond: 0.040050062578223015\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1920\nsuccessfulRxPacketsPerSecond: 0.15018773466833607\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:52:16][351285621612292][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:52:16][351285621612292][908 ms][DEBUG] SU: done in 391 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=280 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 280.003/280.003/280.003/0.000 ms\n [2025-09-08 20:52:16][351285621612292][908 ms][DEBUG] check_internet: online [2025-09-08 20:52:16][351285621612292][908 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:52:16][351285621612292][908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285621612292\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9740\"}'\'' -e'"" [2025-09-08 20:52:16][351285621612292][908 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:52:16][351285621612292][908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285621612292\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9740\"}'\'' -e'"" [2025-09-08 20:52:20][351285621612292][4891 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1271cbbf-b0af-4d99-a17c-7dbf8f890edb","id":"QR_1271cbbf-b0af-4d99-a17c-7dbf8f890edb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:52:20][351285621612292][5047 ms][DEBUG] proc_open done in 4138 ms; code=255; res.len=3343 [2025-09-08 20:52:20][351285621612292][5047 ms][DEBUG] END runCmdUntilRes#1 in 4138 ms [2025-09-08 20:52:20][351285621612292][5047 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:58:05][351798811513898][1 ms][INFO] === Request start === [2025-09-08 20:58:05][351798811513898][1 ms][DEBUG] START check_scloud [2025-09-08 20:58:05][351798811513898][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:58:05][351798811513898][329 ms][DEBUG] SU: done in 327 ms; outu0_a118 14530 817 24860204 197884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:58:05][351798811513898][329 ms][DEBUG] targetPkg: running [2025-09-08 20:58:05][351798811513898][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-08 20:58:05][351798811513898][329 ms][DEBUG] START check_boot_completed [2025-09-08 20:58:05][351798811513898][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:58:05][351798811513898][360 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 20:58:05][351798811513898][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:58:05][351798811513898][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:58:05][351798811513898][407 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 20:58:05][351798811513898][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:58:05][351798811513898][516 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2195\nsuccessfulTxPacketsPerSecond: 0.7659836921740342\nretriedTxPackets: 428\nretriedTxPacketsPerSecond: 0.10279434830041151\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2134\nsuccessfulRxPacketsPerSecond: 0.7096125979447763\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:58:05][351798811513898][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:58:06][351798811513898][1781 ms][DEBUG] SU: done in 1265 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.238/201.238/201.238/0.000 ms\n [2025-09-08 20:58:06][351798811513898][1781 ms][DEBUG] check_internet: online [2025-09-08 20:58:06][351798811513898][1781 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:58:06][351798811513898][1782 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798811513898\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9098\"}'\'' -e'"" [2025-09-08 20:58:06][351798811513898][1782 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:58:06][351798811513898][1782 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798811513898\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9098\"}'\'' -e'"" [2025-09-08 20:58:12][351798811513898][6936 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce9f747e-69d6-4385-a4b0-39c592bd8032","id":"QR_ce9f747e-69d6-4385-a4b0-39c592bd8032","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:58:12][351798811513898][7093 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 20:58:12][351798811513898][7093 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 20:58:12][351798811513898][7093 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:58:15][351798811513898][0 ms][INFO] === Request start === [2025-09-08 20:58:15][351798811513898][1 ms][DEBUG] START check_scloud [2025-09-08 20:58:15][351798811513898][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:58:15][351798811513898][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 14530 817 25004724 208712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:58:15][351798811513898][296 ms][DEBUG] targetPkg: running [2025-09-08 20:58:15][351798811513898][296 ms][DEBUG] END check_scloud in 296 ms [2025-09-08 20:58:15][351798811513898][296 ms][DEBUG] START check_boot_completed [2025-09-08 20:58:15][351798811513898][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:58:15][351798811513898][326 ms][DEBUG] ADB: done in 30 ms; out [2025-09-08 20:58:15][351798811513898][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:58:16][351798811513898][389 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 20:58:16][351798811513898][389 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-08 20:58:16][351798811513898][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 20:58:16][351798811513898][514 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2195\nsuccessfulTxPacketsPerSecond: 0.7659836921740342\nretriedTxPackets: 428\nretriedTxPacketsPerSecond: 0.10279434830041151\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2134\nsuccessfulRxPacketsPerSecond: 0.7096125979447763\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 20:58:16][351798811513898][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 20:58:16][351798811513898][810 ms][DEBUG] SU: done in 296 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.341/191.341/191.341/0.000 ms\n [2025-09-08 20:58:16][351798811513898][811 ms][DEBUG] check_internet: online [2025-09-08 20:58:16][351798811513898][811 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:58:16][351798811513898][811 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798811513898\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5203\"}'\'' -e'"" [2025-09-08 20:58:16][351798811513898][811 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:58:16][351798811513898][811 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798811513898\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5203\"}'\'' -e'"" [2025-09-08 20:58:20][351798811513898][4950 ms][DEBUG] proc_open done in 4139 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 20:58:20][351798811513898][4950 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-09-08 20:58:20][351798811513898][4950 ms][WARN] Detected error: Process with pid 14530 either refused to load frida-agent, or terminated during injectionProcess with pid 14530 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 20:58:20][351798811513898][4950 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 20:58:20][351798811513898][5247 ms][DEBUG] SU: done in 297 ms; outsystem 1031 817 12802548 207832 ep_poll 0 S system_server\n [2025-09-08 20:58:20][351798811513898][5247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 20:58:21][351798811513898][5387 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 20:58:21][351798811513898][5388 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 20:58:21][351798811513898][5388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 20:58:21][351798811513898][5513 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 20:58:21][351798811513898][5513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 20:58:21][351798811513898][5700 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 20:58:23][351798811513898][7715 ms][DEBUG] START check_boot_completed [2025-09-08 20:58:23][351798811513898][7715 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:58:23][351798811513898][7762 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 20:58:23][351798811513898][7762 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:58:23][351798811513898][7809 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:58:23][351798811513898][7809 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 20:58:26][351798811513898][10823 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 20:58:26][351798811513898][10824 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798811513898\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5203\"}'\'' -e'"" [2025-09-08 20:58:30][351798811513898][14479 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33f38d11-2a6a-4d53-a306-d0068be59baa","id":"QR_33f38d11-2a6a-4d53-a306-d0068be59baa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:58:30][351798811513898][14635 ms][DEBUG] proc_open done in 3812 ms; code=255; res.len=3343 [2025-09-08 20:58:30][351798811513898][14635 ms][DEBUG] END runCmdUntilRes#2 in 3812 ms [2025-09-08 20:58:30][351798811513898][14635 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:59:04][350456244467049][0 ms][INFO] === Request start === [2025-09-08 20:59:04][350456244467049][1 ms][DEBUG] START check_scloud [2025-09-08 20:59:04][350456244467049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:59:04][350456244467049][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 17199 817 23644216 127720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:59:04][350456244467049][323 ms][DEBUG] targetPkg: running [2025-09-08 20:59:04][350456244467049][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-08 20:59:04][350456244467049][323 ms][DEBUG] START check_boot_completed [2025-09-08 20:59:04][350456244467049][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:59:04][350456244467049][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 20:59:04][350456244467049][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:59:04][350456244467049][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:59:04][350456244467049][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 20:59:04][350456244467049][416 ms][DEBUG] rawBody.length=1160 [2025-09-08 20:59:04][350456244467049][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456244467049\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3517\"}'\'' -e'"" [2025-09-08 20:59:04][350456244467049][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:59:04][350456244467049][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456244467049\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3517\"}'\'' -e'"" [2025-09-08 20:59:09][350456244467049][5259 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_902025f5-03cd-4409-8f92-04c84e104421","id":"QR_902025f5-03cd-4409-8f92-04c84e104421","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:59:09][350456244467049][5415 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-08 20:59:09][350456244467049][5415 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-08 20:59:09][350456244467049][5415 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 20:59:13][350456244467049][0 ms][INFO] === Request start === [2025-09-08 20:59:13][350456244467049][1 ms][DEBUG] START check_scloud [2025-09-08 20:59:13][350456244467049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 20:59:13][350456244467049][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 17199 817 23768256 138340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 20:59:13][350456244467049][321 ms][DEBUG] targetPkg: running [2025-09-08 20:59:13][350456244467049][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-08 20:59:13][350456244467049][321 ms][DEBUG] START check_boot_completed [2025-09-08 20:59:13][350456244467049][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 20:59:13][350456244467049][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 20:59:13][350456244467049][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 20:59:13][350456244467049][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 20:59:13][350456244467049][414 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 20:59:13][350456244467049][414 ms][DEBUG] rawBody.length=1150 [2025-09-08 20:59:13][350456244467049][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456244467049\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2496\"}'\'' -e'"" [2025-09-08 20:59:13][350456244467049][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 20:59:13][350456244467049][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456244467049\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2496\"}'\'' -e'"" [2025-09-08 20:59:17][350456244467049][4554 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92462758-7997-480b-b02d-c7f4b10e33b9","id":"QR_92462758-7997-480b-b02d-c7f4b10e33b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 20:59:18][350456244467049][4710 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-09-08 20:59:18][350456244467049][4710 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-09-08 20:59:18][350456244467049][4710 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:03:05][357651718587123][1 ms][INFO] === Request start === [2025-09-08 21:03:05][357651718587123][1 ms][DEBUG] START check_scloud [2025-09-08 21:03:05][357651718587123][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:03:05][357651718587123][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 17199 817 23861584 150076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:03:05][357651718587123][304 ms][DEBUG] targetPkg: running [2025-09-08 21:03:05][357651718587123][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-08 21:03:05][357651718587123][304 ms][DEBUG] START check_boot_completed [2025-09-08 21:03:05][357651718587123][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:03:05][357651718587123][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 21:03:05][357651718587123][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:03:05][357651718587123][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:03:05][357651718587123][382 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 21:03:05][357651718587123][382 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:03:05][357651718587123][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718587123\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2411\"}'\'' -e'"" [2025-09-08 21:03:05][357651718587123][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:03:05][357651718587123][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718587123\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2411\"}'\'' -e'"" [2025-09-08 21:03:11][357651718587123][6208 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35814091-cf9f-4ad7-ab45-fe078603f1b0","id":"QR_35814091-cf9f-4ad7-ab45-fe078603f1b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:03:11][357651718587123][6365 ms][DEBUG] proc_open done in 5982 ms; code=255; res.len=3343 [2025-09-08 21:03:11][357651718587123][6365 ms][DEBUG] END runCmdUntilRes#1 in 5982 ms [2025-09-08 21:03:11][357651718587123][6365 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:03:14][357651718587123][0 ms][INFO] === Request start === [2025-09-08 21:03:14][357651718587123][1 ms][DEBUG] START check_scloud [2025-09-08 21:03:14][357651718587123][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:03:15][357651718587123][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 17199 817 24020504 160924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:03:15][357651718587123][310 ms][DEBUG] targetPkg: running [2025-09-08 21:03:15][357651718587123][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 21:03:15][357651718587123][310 ms][DEBUG] START check_boot_completed [2025-09-08 21:03:15][357651718587123][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:03:15][357651718587123][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 21:03:15][357651718587123][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:03:15][357651718587123][419 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 21:03:15][357651718587123][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 21:03:15][357651718587123][420 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:03:15][357651718587123][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718587123\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5480\"}'\'' -e'"" [2025-09-08 21:03:15][357651718587123][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:03:15][357651718587123][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718587123\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5480\"}'\'' -e'"" [2025-09-08 21:03:19][357651718587123][4137 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9442f18d-5ae1-455b-a201-2ee9f18d6689","id":"QR_9442f18d-5ae1-455b-a201-2ee9f18d6689","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:03:19][357651718587123][4293 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-09-08 21:03:19][357651718587123][4293 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-08 21:03:19][357651718587123][4293 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:03:21][355579426471391][0 ms][INFO] === Request start === [2025-09-08 21:03:21][355579426471391][1 ms][DEBUG] START check_scloud [2025-09-08 21:03:21][355579426471391][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:03:21][355579426471391][285 ms][DEBUG] SU: done in 285 ms; outu0_a118 17199 817 24181536 171912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:03:21][355579426471391][286 ms][DEBUG] targetPkg: running [2025-09-08 21:03:21][355579426471391][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-08 21:03:21][355579426471391][286 ms][DEBUG] START check_boot_completed [2025-09-08 21:03:21][355579426471391][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:03:21][355579426471391][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 21:03:21][355579426471391][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:03:21][355579426471391][395 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 21:03:21][355579426471391][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 21:03:21][355579426471391][395 ms][DEBUG] rawBody.length=1149 [2025-09-08 21:03:21][355579426471391][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355579426471391\",\"model\":\"SM-P615\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ITV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3934\"}'\'' -e'"" [2025-09-08 21:03:21][355579426471391][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:03:21][355579426471391][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355579426471391\",\"model\":\"SM-P615\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ITV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3934\"}'\'' -e'"" [2025-09-08 21:03:25][355579426471391][4034 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc381d5c-5682-4628-a0e2-6535b4b154b1","id":"QR_bc381d5c-5682-4628-a0e2-6535b4b154b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:03:25][355579426471391][4191 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-09-08 21:03:25][355579426471391][4191 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-09-08 21:03:25][355579426471391][4191 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:03:27][355579426471391][1 ms][INFO] === Request start === [2025-09-08 21:03:27][355579426471391][1 ms][DEBUG] START check_scloud [2025-09-08 21:03:27][355579426471391][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:03:27][355579426471391][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 17199 817 24299016 183780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:03:27][355579426471391][314 ms][DEBUG] targetPkg: running [2025-09-08 21:03:27][355579426471391][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 21:03:27][355579426471391][314 ms][DEBUG] START check_boot_completed [2025-09-08 21:03:27][355579426471391][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:03:28][355579426471391][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 21:03:28][355579426471391][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:03:28][355579426471391][409 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 21:03:28][355579426471391][410 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-08 21:03:28][355579426471391][410 ms][DEBUG] rawBody.length=1159 [2025-09-08 21:03:28][355579426471391][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355579426471391\",\"model\":\"SM-P615\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ITV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3582\"}'\'' -e'"" [2025-09-08 21:03:28][355579426471391][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:03:28][355579426471391][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355579426471391\",\"model\":\"SM-P615\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ITV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3582\"}'\'' -e'"" [2025-09-08 21:03:32][355579426471391][5265 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b17fe3cf-68ff-48b4-9955-d2c15adeac98","id":"QR_b17fe3cf-68ff-48b4-9955-d2c15adeac98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:03:33][355579426471391][5422 ms][DEBUG] proc_open done in 5012 ms; code=255; res.len=3343 [2025-09-08 21:03:33][355579426471391][5422 ms][DEBUG] END runCmdUntilRes#1 in 5012 ms [2025-09-08 21:03:33][355579426471391][5422 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:04:04][350547662715024][0 ms][INFO] === Request start === [2025-09-08 21:04:04][350547662715024][1 ms][DEBUG] START check_scloud [2025-09-08 21:04:04][350547662715024][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:04:05][350547662715024][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 17199 817 24409764 195308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:04:05][350547662715024][311 ms][DEBUG] targetPkg: running [2025-09-08 21:04:05][350547662715024][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 21:04:05][350547662715024][311 ms][DEBUG] START check_boot_completed [2025-09-08 21:04:05][350547662715024][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:04:05][350547662715024][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 21:04:05][350547662715024][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:04:05][350547662715024][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:04:05][350547662715024][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 21:04:05][350547662715024][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 21:04:05][350547662715024][514 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2351\nsuccessfulTxPacketsPerSecond: 0.3399544924429417\nretriedTxPackets: 469\nretriedTxPacketsPerSecond: 0.14569468874387204\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2274\nsuccessfulRxPacketsPerSecond: 0.33995443444323153\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 21:04:05][350547662715024][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 21:04:06][350547662715024][1764 ms][DEBUG] SU: done in 1250 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.959/200.959/200.959/0.000 ms\n [2025-09-08 21:04:06][350547662715024][1764 ms][DEBUG] check_internet: online [2025-09-08 21:04:06][350547662715024][1764 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:04:06][350547662715024][1764 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547662715024\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2413\"}'\'' -e'"" [2025-09-08 21:04:06][350547662715024][1764 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:04:06][350547662715024][1764 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547662715024\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2413\"}'\'' -e'"" [2025-09-08 21:04:11][350547662715024][7215 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ddfd7c6e-b5f0-46e2-a46b-9bfe8fe3a225","id":"QR_ddfd7c6e-b5f0-46e2-a46b-9bfe8fe3a225","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:04:12][350547662715024][7371 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-09-08 21:04:12][350547662715024][7371 ms][DEBUG] END runCmdUntilRes#1 in 5607 ms [2025-09-08 21:04:12][350547662715024][7371 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:04:15][350547662715024][0 ms][INFO] === Request start === [2025-09-08 21:04:15][350547662715024][1 ms][DEBUG] START check_scloud [2025-09-08 21:04:15][350547662715024][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:04:16][350547662715024][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 17199 817 24556332 207084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:04:16][350547662715024][311 ms][DEBUG] targetPkg: running [2025-09-08 21:04:16][350547662715024][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 21:04:16][350547662715024][311 ms][DEBUG] START check_boot_completed [2025-09-08 21:04:16][350547662715024][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:04:16][350547662715024][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 21:04:16][350547662715024][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:04:16][350547662715024][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:04:16][350547662715024][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 21:04:16][350547662715024][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 21:04:16][350547662715024][514 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2351\nsuccessfulTxPacketsPerSecond: 0.3399544924429417\nretriedTxPackets: 469\nretriedTxPacketsPerSecond: 0.14569468874387204\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2274\nsuccessfulRxPacketsPerSecond: 0.33995443444323153\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 21:04:16][350547662715024][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 21:04:16][350547662715024][811 ms][DEBUG] SU: done in 297 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.496/190.496/190.496/0.000 ms\n [2025-09-08 21:04:16][350547662715024][811 ms][DEBUG] check_internet: online [2025-09-08 21:04:16][350547662715024][811 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:04:16][350547662715024][811 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547662715024\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8409\"}'\'' -e'"" [2025-09-08 21:04:16][350547662715024][812 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:04:16][350547662715024][812 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547662715024\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8409\"}'\'' -e'"" [2025-09-08 21:04:20][350547662715024][4701 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8945fc70-8e71-4d12-944d-f2bad888463f","id":"QR_8945fc70-8e71-4d12-944d-f2bad888463f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:04:20][350547662715024][4857 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-09-08 21:04:20][350547662715024][4857 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-09-08 21:04:20][350547662715024][4857 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:05:03][355045116708070][0 ms][INFO] === Request start === [2025-09-08 21:05:03][355045116708070][1 ms][DEBUG] START check_scloud [2025-09-08 21:05:03][355045116708070][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:05:04][355045116708070][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 17199 817 24692588 217656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:05:04][355045116708070][316 ms][DEBUG] targetPkg: running [2025-09-08 21:05:04][355045116708070][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 21:05:04][355045116708070][316 ms][DEBUG] START check_boot_completed [2025-09-08 21:05:04][355045116708070][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:05:04][355045116708070][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 21:05:04][355045116708070][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:05:04][355045116708070][396 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 21:05:04][355045116708070][396 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-08 21:05:04][355045116708070][396 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:05:04][355045116708070][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355045116708070\",\"model\":\"SM-N770F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XEF\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7941\"}'\'' -e'"" [2025-09-08 21:05:04][355045116708070][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:05:04][355045116708070][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355045116708070\",\"model\":\"SM-N770F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XEF\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7941\"}'\'' -e'"" [2025-09-08 21:05:07][355045116708070][3847 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e1aa7868-fe6a-44ec-bc05-46f9a01c7fbc","id":"QR_e1aa7868-fe6a-44ec-bc05-46f9a01c7fbc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:05:07][355045116708070][4003 ms][DEBUG] proc_open done in 3606 ms; code=255; res.len=3343 [2025-09-08 21:05:07][355045116708070][4003 ms][DEBUG] END runCmdUntilRes#1 in 3607 ms [2025-09-08 21:05:07][355045116708070][4003 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:05:10][355045116708070][1 ms][INFO] === Request start === [2025-09-08 21:05:10][355045116708070][1 ms][DEBUG] START check_scloud [2025-09-08 21:05:10][355045116708070][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:05:10][355045116708070][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 17199 817 24859764 229520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:05:10][355045116708070][254 ms][DEBUG] targetPkg: running [2025-09-08 21:05:10][355045116708070][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-08 21:05:10][355045116708070][254 ms][DEBUG] START check_boot_completed [2025-09-08 21:05:10][355045116708070][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:05:10][355045116708070][300 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 21:05:10][355045116708070][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:05:10][355045116708070][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:05:10][355045116708070][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 21:05:10][355045116708070][347 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:05:10][355045116708070][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355045116708070\",\"model\":\"SM-N770F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XEF\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4012\"}'\'' -e'"" [2025-09-08 21:05:10][355045116708070][347 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:05:10][355045116708070][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355045116708070\",\"model\":\"SM-N770F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XEF\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4012\"}'\'' -e'"" [2025-09-08 21:05:16][355045116708070][6361 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5fd8ec28-7713-4fd5-9b77-382fff6bb1b7","id":"QR_5fd8ec28-7713-4fd5-9b77-382fff6bb1b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:05:16][355045116708070][6517 ms][DEBUG] proc_open done in 6170 ms; code=255; res.len=3343 [2025-09-08 21:05:16][355045116708070][6517 ms][DEBUG] END runCmdUntilRes#1 in 6170 ms [2025-09-08 21:05:16][355045116708070][6517 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:19:03][354772951986294][1 ms][INFO] === Request start === [2025-09-08 21:19:03][354772951986294][1 ms][DEBUG] START check_scloud [2025-09-08 21:19:03][354772951986294][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:19:03][354772951986294][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 17199 817 24974440 240900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:19:03][354772951986294][295 ms][DEBUG] targetPkg: running [2025-09-08 21:19:03][354772951986294][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-08 21:19:03][354772951986294][295 ms][DEBUG] START check_boot_completed [2025-09-08 21:19:03][354772951986294][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:19:03][354772951986294][327 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 21:19:03][354772951986294][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:19:03][354772951986294][389 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 21:19:03][354772951986294][389 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 21:19:03][354772951986294][389 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:19:03][354772951986294][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354772951986294\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5135\"}'\'' -e'"" [2025-09-08 21:19:03][354772951986294][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:19:03][354772951986294][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354772951986294\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5135\"}'\'' -e'"" [2025-09-08 21:19:07][354772951986294][4326 ms][DEBUG] proc_open done in 3936 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 21:19:07][354772951986294][4326 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-09-08 21:19:07][354772951986294][4326 ms][WARN] Detected error: Process with pid 17199 either refused to load frida-agent, or terminated during injectionProcess with pid 17199 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 21:19:07][354772951986294][4326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 21:19:07][354772951986294][4638 ms][DEBUG] SU: done in 312 ms; outsystem 1031 817 12970660 206888 ep_poll 0 S system_server\n [2025-09-08 21:19:07][354772951986294][4638 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 21:19:07][354772951986294][4763 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 21:19:07][354772951986294][4763 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 21:19:07][354772951986294][4763 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 21:19:07][354772951986294][4872 ms][DEBUG] SU: done in 109 ms; out [2025-09-08 21:19:07][354772951986294][4872 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 21:19:08][354772951986294][5029 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 21:19:10][354772951986294][7044 ms][DEBUG] START check_boot_completed [2025-09-08 21:19:10][354772951986294][7044 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:19:10][354772951986294][7091 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 21:19:10][354772951986294][7091 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:19:10][354772951986294][7138 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:19:10][354772951986294][7138 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 21:19:13][354772951986294][10152 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 21:19:13][354772951986294][10152 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354772951986294\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5135\"}'\'' -e'"" [2025-09-08 21:19:16][354772951986294][13886 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc52eb78-a7e1-41f6-a2e0-23fd31130297","id":"QR_fc52eb78-a7e1-41f6-a2e0-23fd31130297","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:19:17][354772951986294][14042 ms][DEBUG] proc_open done in 3890 ms; code=255; res.len=3343 [2025-09-08 21:19:17][354772951986294][14042 ms][DEBUG] END runCmdUntilRes#2 in 3890 ms [2025-09-08 21:19:17][354772951986294][14042 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:19:19][354772951986294][0 ms][INFO] === Request start === [2025-09-08 21:19:19][354772951986294][1 ms][DEBUG] START check_scloud [2025-09-08 21:19:19][354772951986294][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:19:19][354772951986294][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 19199 817 23705820 124740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:19:19][354772951986294][312 ms][DEBUG] targetPkg: running [2025-09-08 21:19:19][354772951986294][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 21:19:19][354772951986294][312 ms][DEBUG] START check_boot_completed [2025-09-08 21:19:19][354772951986294][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:19:19][354772951986294][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 21:19:19][354772951986294][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:19:19][354772951986294][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:19:19][354772951986294][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 21:19:19][354772951986294][406 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:19:19][354772951986294][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354772951986294\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3165\"}'\'' -e'"" [2025-09-08 21:19:19][354772951986294][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:19:19][354772951986294][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354772951986294\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3165\"}'\'' -e'"" [2025-09-08 21:19:25][354772951986294][5811 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3f747f5-15a4-4f90-8ba2-32c5f203e151","id":"QR_b3f747f5-15a4-4f90-8ba2-32c5f203e151","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:19:25][354772951986294][5967 ms][DEBUG] proc_open done in 5561 ms; code=255; res.len=3343 [2025-09-08 21:19:25][354772951986294][5967 ms][DEBUG] END runCmdUntilRes#1 in 5561 ms [2025-09-08 21:19:25][354772951986294][5967 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:21:04][354126950463591][1 ms][INFO] === Request start === [2025-09-08 21:21:04][354126950463591][1 ms][DEBUG] START check_scloud [2025-09-08 21:21:04][354126950463591][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:21:05][354126950463591][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 19199 817 23774424 138496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:21:05][354126950463591][277 ms][DEBUG] targetPkg: running [2025-09-08 21:21:05][354126950463591][277 ms][DEBUG] END check_scloud in 276 ms [2025-09-08 21:21:05][354126950463591][277 ms][DEBUG] START check_boot_completed [2025-09-08 21:21:05][354126950463591][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:21:05][354126950463591][324 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 21:21:05][354126950463591][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:21:05][354126950463591][371 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 21:21:05][354126950463591][371 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 21:21:05][354126950463591][371 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:21:05][354126950463591][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354126950463591\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6121\"}'\'' -e'"" [2025-09-08 21:21:05][354126950463591][371 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:21:05][354126950463591][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354126950463591\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6121\"}'\'' -e'"" [2025-09-08 21:21:10][354126950463591][5978 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_95a9f1d0-20f6-46de-8bdf-f00c7ecc07d3","id":"QR_95a9f1d0-20f6-46de-8bdf-f00c7ecc07d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:21:10][354126950463591][6135 ms][DEBUG] proc_open done in 5763 ms; code=255; res.len=3343 [2025-09-08 21:21:10][354126950463591][6135 ms][DEBUG] END runCmdUntilRes#1 in 5763 ms [2025-09-08 21:21:10][354126950463591][6135 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:21:14][354126950463591][0 ms][INFO] === Request start === [2025-09-08 21:21:14][354126950463591][1 ms][DEBUG] START check_scloud [2025-09-08 21:21:14][354126950463591][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:21:14][354126950463591][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 19199 817 23925652 150472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:21:14][354126950463591][316 ms][DEBUG] targetPkg: running [2025-09-08 21:21:14][354126950463591][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 21:21:14][354126950463591][317 ms][DEBUG] START check_boot_completed [2025-09-08 21:21:14][354126950463591][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:21:14][354126950463591][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 21:21:14][354126950463591][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:21:14][354126950463591][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:21:14][354126950463591][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 21:21:14][354126950463591][410 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:21:14][354126950463591][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354126950463591\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7799\"}'\'' -e'"" [2025-09-08 21:21:14][354126950463591][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:21:14][354126950463591][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354126950463591\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7799\"}'\'' -e'"" [2025-09-08 21:21:18][354126950463591][4393 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_acae3b65-2b9b-4084-bda4-cf7a49526995","id":"QR_acae3b65-2b9b-4084-bda4-cf7a49526995","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:21:18][354126950463591][4549 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-09-08 21:21:18][354126950463591][4550 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-09-08 21:21:18][354126950463591][4550 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:22:04][352388503229331][0 ms][INFO] === Request start === [2025-09-08 21:22:04][352388503229331][1 ms][DEBUG] START check_scloud [2025-09-08 21:22:04][352388503229331][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:22:04][352388503229331][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 19199 817 24029268 161712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:22:04][352388503229331][251 ms][DEBUG] targetPkg: running [2025-09-08 21:22:04][352388503229331][251 ms][DEBUG] END check_scloud in 251 ms [2025-09-08 21:22:04][352388503229331][251 ms][DEBUG] START check_boot_completed [2025-09-08 21:22:04][352388503229331][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:22:04][352388503229331][298 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 21:22:04][352388503229331][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:22:04][352388503229331][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:22:04][352388503229331][345 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 21:22:04][352388503229331][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 21:22:04][352388503229331][454 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2719\nsuccessfulTxPacketsPerSecond: 0.13500564718743724\nretriedTxPackets: 549\nretriedTxPacketsPerSecond: 0.0131712826524329\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2598\nsuccessfulRxPacketsPerSecond: 0.13500564718743724\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 21:22:04][352388503229331][455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 21:22:05][352388503229331][1969 ms][DEBUG] SU: done in 1515 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.312/190.312/190.312/0.000 ms\n [2025-09-08 21:22:05][352388503229331][1970 ms][DEBUG] check_internet: online [2025-09-08 21:22:05][352388503229331][1970 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:22:05][352388503229331][1970 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352388503229331\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4682\"}'\'' -e'"" [2025-09-08 21:22:05][352388503229331][1970 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:22:05][352388503229331][1970 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352388503229331\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4682\"}'\'' -e'"" [2025-09-08 21:22:09][352388503229331][5453 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7003074-e878-4b2b-8a5b-40be4d5bfb5e","id":"QR_d7003074-e878-4b2b-8a5b-40be4d5bfb5e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:22:09][352388503229331][5609 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-09-08 21:22:09][352388503229331][5609 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-09-08 21:22:09][352388503229331][5609 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:22:11][352388503229331][0 ms][INFO] === Request start === [2025-09-08 21:22:11][352388503229331][1 ms][DEBUG] START check_scloud [2025-09-08 21:22:11][352388503229331][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:22:12][352388503229331][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 19199 817 24186012 172472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:22:12][352388503229331][268 ms][DEBUG] targetPkg: running [2025-09-08 21:22:12][352388503229331][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-08 21:22:12][352388503229331][268 ms][DEBUG] START check_boot_completed [2025-09-08 21:22:12][352388503229331][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:22:12][352388503229331][300 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 21:22:12][352388503229331][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:22:12][352388503229331][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:22:12][352388503229331][346 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 21:22:12][352388503229331][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 21:22:12][352388503229331][456 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2719\nsuccessfulTxPacketsPerSecond: 0.13500564718743724\nretriedTxPackets: 549\nretriedTxPacketsPerSecond: 0.0131712826524329\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2598\nsuccessfulRxPacketsPerSecond: 0.13500564718743724\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 21:22:12][352388503229331][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 21:22:12][352388503229331][784 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.092/223.092/223.092/0.000 ms\n [2025-09-08 21:22:12][352388503229331][784 ms][DEBUG] check_internet: online [2025-09-08 21:22:12][352388503229331][784 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:22:12][352388503229331][784 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352388503229331\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5028\"}'\'' -e'"" [2025-09-08 21:22:12][352388503229331][784 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:22:12][352388503229331][784 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352388503229331\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5028\"}'\'' -e'"" [2025-09-08 21:22:17][352388503229331][5923 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c3edc3f-ca9a-4a02-8641-37727991028b","id":"QR_9c3edc3f-ca9a-4a02-8641-37727991028b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:22:18][352388503229331][6079 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-08 21:22:18][352388503229331][6079 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-08 21:22:18][352388503229331][6079 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:25:05][350341125558522][1 ms][INFO] === Request start === [2025-09-08 21:25:05][350341125558522][1 ms][DEBUG] START check_scloud [2025-09-08 21:25:05][350341125558522][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:25:05][350341125558522][352 ms][DEBUG] SU: done in 351 ms; outu0_a118 19199 817 24335608 128712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:25:05][350341125558522][352 ms][DEBUG] targetPkg: running [2025-09-08 21:25:05][350341125558522][352 ms][DEBUG] END check_scloud in 351 ms [2025-09-08 21:25:05][350341125558522][352 ms][DEBUG] START check_boot_completed [2025-09-08 21:25:05][350341125558522][352 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:25:05][350341125558522][383 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 21:25:05][350341125558522][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:25:05][350341125558522][430 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:25:05][350341125558522][430 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 21:25:05][350341125558522][430 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:25:05][350341125558522][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341125558522\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8719\"}'\'' -e'"" [2025-09-08 21:25:05][350341125558522][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:25:05][350341125558522][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341125558522\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8719\"}'\'' -e'"" [2025-09-08 21:25:12][350341125558522][7116 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bcc940b8-be46-4604-b9ba-74d2ed8777ff","id":"QR_bcc940b8-be46-4604-b9ba-74d2ed8777ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:25:12][350341125558522][7272 ms][DEBUG] proc_open done in 6842 ms; code=255; res.len=3343 [2025-09-08 21:25:12][350341125558522][7272 ms][DEBUG] END runCmdUntilRes#1 in 6842 ms [2025-09-08 21:25:12][350341125558522][7272 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:25:15][350341125558522][0 ms][INFO] === Request start === [2025-09-08 21:25:15][350341125558522][1 ms][DEBUG] START check_scloud [2025-09-08 21:25:15][350341125558522][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:25:16][350341125558522][331 ms][DEBUG] SU: done in 330 ms; outu0_a118 19199 817 24506752 132124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:25:16][350341125558522][331 ms][DEBUG] targetPkg: running [2025-09-08 21:25:16][350341125558522][331 ms][DEBUG] END check_scloud in 330 ms [2025-09-08 21:25:16][350341125558522][331 ms][DEBUG] START check_boot_completed [2025-09-08 21:25:16][350341125558522][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:25:16][350341125558522][378 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 21:25:16][350341125558522][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:25:16][350341125558522][440 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 21:25:16][350341125558522][440 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 21:25:16][350341125558522][440 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:25:16][350341125558522][440 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341125558522\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1207\"}'\'' -e'"" [2025-09-08 21:25:16][350341125558522][440 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:25:16][350341125558522][440 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341125558522\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1207\"}'\'' -e'"" [2025-09-08 21:25:20][350341125558522][4517 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ceea1a29-60da-4157-a90e-6bd693a0f67a","id":"QR_ceea1a29-60da-4157-a90e-6bd693a0f67a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:25:20][350341125558522][4673 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-09-08 21:25:20][350341125558522][4673 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-08 21:25:20][350341125558522][4673 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:28:03][352221800872315][1 ms][INFO] === Request start === [2025-09-08 21:28:03][352221800872315][1 ms][DEBUG] START check_scloud [2025-09-08 21:28:03][352221800872315][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:28:04][352221800872315][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 19199 817 24639040 143560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:28:04][352221800872315][274 ms][DEBUG] targetPkg: running [2025-09-08 21:28:04][352221800872315][274 ms][DEBUG] END check_scloud in 273 ms [2025-09-08 21:28:04][352221800872315][274 ms][DEBUG] START check_boot_completed [2025-09-08 21:28:04][352221800872315][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:28:04][352221800872315][319 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 21:28:04][352221800872315][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:28:04][352221800872315][397 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 21:28:04][352221800872315][397 ms][DEBUG] END check_boot_completed in 123 ms [2025-09-08 21:28:04][352221800872315][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 21:28:04][352221800872315][507 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3303\nsuccessfulTxPacketsPerSecond: 17.986123460366215\nretriedTxPackets: 624\nretriedTxPacketsPerSecond: 1.0723983926531861\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3306\nsuccessfulRxPacketsPerSecond: 25.004967700345713\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 21:28:04][352221800872315][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 21:28:05][352221800872315][1741 ms][DEBUG] SU: done in 1234 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.451/198.451/198.451/0.000 ms\n [2025-09-08 21:28:05][352221800872315][1741 ms][DEBUG] check_internet: online [2025-09-08 21:28:05][352221800872315][1741 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:28:05][352221800872315][1741 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352221800872315\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7789\"}'\'' -e'"" [2025-09-08 21:28:05][352221800872315][1742 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:28:05][352221800872315][1742 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352221800872315\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7789\"}'\'' -e'"" [2025-09-08 21:28:09][352221800872315][5568 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_014b6aac-0ecb-4ad0-8104-43162d178c55","id":"QR_014b6aac-0ecb-4ad0-8104-43162d178c55","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:28:09][352221800872315][5724 ms][DEBUG] proc_open done in 3982 ms; code=255; res.len=3343 [2025-09-08 21:28:09][352221800872315][5724 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-08 21:28:09][352221800872315][5724 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:28:12][352221800872315][0 ms][INFO] === Request start === [2025-09-08 21:28:12][352221800872315][1 ms][DEBUG] START check_scloud [2025-09-08 21:28:12][352221800872315][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:28:12][352221800872315][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 19199 817 24769352 154920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:28:12][352221800872315][313 ms][DEBUG] targetPkg: running [2025-09-08 21:28:12][352221800872315][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 21:28:12][352221800872315][313 ms][DEBUG] START check_boot_completed [2025-09-08 21:28:12][352221800872315][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:28:12][352221800872315][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 21:28:12][352221800872315][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:28:12][352221800872315][408 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 21:28:12][352221800872315][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 21:28:12][352221800872315][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 21:28:12][352221800872315][516 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3303\nsuccessfulTxPacketsPerSecond: 17.986123460366215\nretriedTxPackets: 624\nretriedTxPacketsPerSecond: 1.0723983926531861\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3306\nsuccessfulRxPacketsPerSecond: 25.004967700345713\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 21:28:12][352221800872315][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 21:28:12][352221800872315][985 ms][DEBUG] SU: done in 469 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=373 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 373.576/373.576/373.576/0.000 ms\n [2025-09-08 21:28:12][352221800872315][985 ms][DEBUG] check_internet: online [2025-09-08 21:28:12][352221800872315][985 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:28:12][352221800872315][985 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352221800872315\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5569\"}'\'' -e'"" [2025-09-08 21:28:12][352221800872315][985 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:28:12][352221800872315][985 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352221800872315\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5569\"}'\'' -e'"" [2025-09-08 21:28:18][352221800872315][6546 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3caf2fb1-4640-4b36-b0aa-76c1c6e8cff9","id":"QR_3caf2fb1-4640-4b36-b0aa-76c1c6e8cff9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:28:18][352221800872315][6702 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-08 21:28:18][352221800872315][6702 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-08 21:28:18][352221800872315][6702 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:29:03][351978522550567][0 ms][INFO] === Request start === [2025-09-08 21:29:03][351978522550567][1 ms][DEBUG] START check_scloud [2025-09-08 21:29:03][351978522550567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:29:03][351978522550567][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 19199 817 24880136 166740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:29:03][351978522550567][324 ms][DEBUG] targetPkg: running [2025-09-08 21:29:03][351978522550567][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-08 21:29:03][351978522550567][324 ms][DEBUG] START check_boot_completed [2025-09-08 21:29:03][351978522550567][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:29:03][351978522550567][355 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 21:29:03][351978522550567][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:29:03][351978522550567][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:29:03][351978522550567][402 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 21:29:03][351978522550567][402 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:29:03][351978522550567][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522550567\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2347\"}'\'' -e'"" [2025-09-08 21:29:03][351978522550567][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:29:03][351978522550567][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522550567\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2347\"}'\'' -e'"" [2025-09-08 21:29:07][351978522550567][4479 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1cb6b318-0902-4bba-93db-9fe82e716aef","id":"QR_1cb6b318-0902-4bba-93db-9fe82e716aef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:29:07][351978522550567][4635 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-09-08 21:29:07][351978522550567][4635 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-08 21:29:07][351978522550567][4635 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:29:10][351978522550567][0 ms][INFO] === Request start === [2025-09-08 21:29:10][351978522550567][1 ms][DEBUG] START check_scloud [2025-09-08 21:29:10][351978522550567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:29:10][351978522550567][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 19199 817 25000208 177780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:29:10][351978522550567][259 ms][DEBUG] targetPkg: running [2025-09-08 21:29:10][351978522550567][259 ms][DEBUG] END check_scloud in 259 ms [2025-09-08 21:29:10][351978522550567][259 ms][DEBUG] START check_boot_completed [2025-09-08 21:29:10][351978522550567][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:29:10][351978522550567][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 21:29:10][351978522550567][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:29:10][351978522550567][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:29:10][351978522550567][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 21:29:10][351978522550567][353 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:29:10][351978522550567][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522550567\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7926\"}'\'' -e'"" [2025-09-08 21:29:10][351978522550567][353 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:29:10][351978522550567][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522550567\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7926\"}'\'' -e'"" [2025-09-08 21:29:14][351978522550567][4524 ms][DEBUG] proc_open done in 4171 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 21:29:14][351978522550567][4524 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-09-08 21:29:14][351978522550567][4524 ms][WARN] Detected error: Process with pid 19199 either refused to load frida-agent, or terminated during injectionProcess with pid 19199 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 21:29:14][351978522550567][4524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 21:29:15][351978522550567][4836 ms][DEBUG] SU: done in 313 ms; outsystem 1031 817 12934472 205468 ep_poll 0 S system_server\n [2025-09-08 21:29:15][351978522550567][4836 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 21:29:15][351978522550567][4992 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 21:29:15][351978522550567][4992 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 21:29:15][351978522550567][4992 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 21:29:15][351978522550567][5103 ms][DEBUG] SU: done in 111 ms; out [2025-09-08 21:29:15][351978522550567][5103 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 21:29:15][351978522550567][5336 ms][DEBUG] SU: done in 233 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 21:29:17][351978522550567][7351 ms][DEBUG] START check_boot_completed [2025-09-08 21:29:17][351978522550567][7351 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:29:17][351978522550567][7398 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 21:29:17][351978522550567][7398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:29:17][351978522550567][7460 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 21:29:17][351978522550567][7460 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 21:29:20][351978522550567][10475 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 21:29:20][351978522550567][10475 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522550567\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7926\"}'\'' -e'"" [2025-09-08 21:29:25][351978522550567][15646 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a05d9452-6c08-458e-b014-4e41c206865e","id":"QR_a05d9452-6c08-458e-b014-4e41c206865e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:29:25][351978522550567][15802 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-08 21:29:25][351978522550567][15802 ms][DEBUG] END runCmdUntilRes#2 in 5327 ms [2025-09-08 21:29:25][351978522550567][15802 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:29:30][352277222902684][0 ms][INFO] === Request start === [2025-09-08 21:29:30][352277222902684][1 ms][DEBUG] START check_scloud [2025-09-08 21:29:30][352277222902684][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:29:30][352277222902684][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 21729 817 23720160 124928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:29:30][352277222902684][255 ms][DEBUG] targetPkg: running [2025-09-08 21:29:30][352277222902684][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-08 21:29:30][352277222902684][255 ms][DEBUG] START check_boot_completed [2025-09-08 21:29:30][352277222902684][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:29:30][352277222902684][302 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 21:29:30][352277222902684][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:29:30][352277222902684][364 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 21:29:30][352277222902684][365 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 21:29:30][352277222902684][365 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:29:30][352277222902684][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352277222902684\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7027\"}'\'' -e'"" [2025-09-08 21:29:30][352277222902684][365 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:29:30][352277222902684][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352277222902684\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7027\"}'\'' -e'"" [2025-09-08 21:29:34][352277222902684][4176 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7bf163d-8572-4479-bbf5-37ec5044b376","id":"QR_a7bf163d-8572-4479-bbf5-37ec5044b376","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:29:34][352277222902684][4332 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-09-08 21:29:34][352277222902684][4332 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-09-08 21:29:34][352277222902684][4332 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:29:36][352277222902684][0 ms][INFO] === Request start === [2025-09-08 21:29:36][352277222902684][1 ms][DEBUG] START check_scloud [2025-09-08 21:29:36][352277222902684][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:29:37][352277222902684][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 21729 817 23861812 138132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:29:37][352277222902684][278 ms][DEBUG] targetPkg: running [2025-09-08 21:29:37][352277222902684][278 ms][DEBUG] END check_scloud in 278 ms [2025-09-08 21:29:37][352277222902684][278 ms][DEBUG] START check_boot_completed [2025-09-08 21:29:37][352277222902684][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:29:37][352277222902684][324 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 21:29:37][352277222902684][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:29:37][352277222902684][402 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 21:29:37][352277222902684][402 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-08 21:29:37][352277222902684][402 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:29:37][352277222902684][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352277222902684\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8691\"}'\'' -e'"" [2025-09-08 21:29:37][352277222902684][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:29:37][352277222902684][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352277222902684\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8691\"}'\'' -e'"" [2025-09-08 21:29:42][352277222902684][5135 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18a965f9-0570-413c-adea-1144b8fb0480","id":"QR_18a965f9-0570-413c-adea-1144b8fb0480","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:29:42][352277222902684][5292 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-08 21:29:42][352277222902684][5292 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-08 21:29:42][352277222902684][5292 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:33:05][357980446344857][1 ms][INFO] === Request start === [2025-09-08 21:33:05][357980446344857][1 ms][DEBUG] START check_scloud [2025-09-08 21:33:05][357980446344857][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:33:05][357980446344857][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 21729 817 23919472 150632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:33:05][357980446344857][272 ms][DEBUG] targetPkg: running [2025-09-08 21:33:05][357980446344857][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-08 21:33:05][357980446344857][272 ms][DEBUG] START check_boot_completed [2025-09-08 21:33:05][357980446344857][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:33:05][357980446344857][303 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 21:33:05][357980446344857][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:33:05][357980446344857][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:33:05][357980446344857][350 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 21:33:05][357980446344857][350 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:33:05][357980446344857][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980446344857\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2806\"}'\'' -e'"" [2025-09-08 21:33:05][357980446344857][350 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:33:05][357980446344857][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980446344857\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2806\"}'\'' -e'"" [2025-09-08 21:33:10][357980446344857][5614 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4132e9fa-3b2f-4cc4-a5e6-eafe56f2667d","id":"QR_4132e9fa-3b2f-4cc4-a5e6-eafe56f2667d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:33:10][357980446344857][5770 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-08 21:33:10][357980446344857][5770 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-08 21:33:10][357980446344857][5770 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:33:14][357980446344857][1 ms][INFO] === Request start === [2025-09-08 21:33:14][357980446344857][1 ms][DEBUG] START check_scloud [2025-09-08 21:33:14][357980446344857][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:33:14][357980446344857][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 21729 817 24072184 161468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:33:14][357980446344857][258 ms][DEBUG] targetPkg: running [2025-09-08 21:33:14][357980446344857][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-08 21:33:14][357980446344857][258 ms][DEBUG] START check_boot_completed [2025-09-08 21:33:14][357980446344857][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:33:14][357980446344857][305 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 21:33:14][357980446344857][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:33:14][357980446344857][383 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 21:33:14][357980446344857][383 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 21:33:14][357980446344857][384 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:33:14][357980446344857][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980446344857\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7543\"}'\'' -e'"" [2025-09-08 21:33:14][357980446344857][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:33:14][357980446344857][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980446344857\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7543\"}'\'' -e'"" [2025-09-08 21:33:18][357980446344857][4117 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2226b17f-aba1-431e-bbd7-54a89a280a09","id":"QR_2226b17f-aba1-431e-bbd7-54a89a280a09","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:33:18][357980446344857][4273 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-09-08 21:33:18][357980446344857][4273 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-08 21:33:18][357980446344857][4273 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:37:04][353335866131249][1 ms][INFO] === Request start === [2025-09-08 21:37:04][353335866131249][1 ms][DEBUG] START check_scloud [2025-09-08 21:37:04][353335866131249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:37:04][353335866131249][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 21729 817 24163384 173116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:37:04][353335866131249][258 ms][DEBUG] targetPkg: running [2025-09-08 21:37:04][353335866131249][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-08 21:37:04][353335866131249][258 ms][DEBUG] START check_boot_completed [2025-09-08 21:37:04][353335866131249][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:37:05][353335866131249][305 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 21:37:05][353335866131249][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:37:05][353335866131249][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:37:05][353335866131249][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 21:37:05][353335866131249][352 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:37:05][353335866131249][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335866131249\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6874\"}'\'' -e'"" [2025-09-08 21:37:05][353335866131249][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:37:05][353335866131249][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335866131249\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6874\"}'\'' -e'"" [2025-09-08 21:37:11][353335866131249][6413 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2addc02-7e24-441d-909f-dd9891cb664d","id":"QR_f2addc02-7e24-441d-909f-dd9891cb664d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:37:11][353335866131249][6569 ms][DEBUG] proc_open done in 6217 ms; code=255; res.len=3343 [2025-09-08 21:37:11][353335866131249][6569 ms][DEBUG] END runCmdUntilRes#1 in 6217 ms [2025-09-08 21:37:11][353335866131249][6569 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:37:14][353335866131249][0 ms][INFO] === Request start === [2025-09-08 21:37:14][353335866131249][1 ms][DEBUG] START check_scloud [2025-09-08 21:37:14][353335866131249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:37:15][353335866131249][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 21729 817 24326400 184536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:37:15][353335866131249][311 ms][DEBUG] targetPkg: running [2025-09-08 21:37:15][353335866131249][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 21:37:15][353335866131249][311 ms][DEBUG] START check_boot_completed [2025-09-08 21:37:15][353335866131249][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:37:15][353335866131249][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 21:37:15][353335866131249][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:37:15][353335866131249][405 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 21:37:15][353335866131249][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 21:37:15][353335866131249][406 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:37:15][353335866131249][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335866131249\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4648\"}'\'' -e'"" [2025-09-08 21:37:15][353335866131249][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:37:15][353335866131249][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335866131249\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4648\"}'\'' -e'"" [2025-09-08 21:37:18][353335866131249][4153 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a611283-e7a1-445d-90b2-0e4c7b02d380","id":"QR_4a611283-e7a1-445d-90b2-0e4c7b02d380","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:37:19][353335866131249][4309 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=3343 [2025-09-08 21:37:19][353335866131249][4309 ms][DEBUG] END runCmdUntilRes#1 in 3904 ms [2025-09-08 21:37:19][353335866131249][4309 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:42:04][352967354731485][1 ms][INFO] === Request start === [2025-09-08 21:42:04][352967354731485][1 ms][DEBUG] START check_scloud [2025-09-08 21:42:04][352967354731485][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:42:04][352967354731485][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 21729 817 24423744 195744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:42:04][352967354731485][303 ms][DEBUG] targetPkg: running [2025-09-08 21:42:04][352967354731485][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 21:42:04][352967354731485][303 ms][DEBUG] START check_boot_completed [2025-09-08 21:42:04][352967354731485][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:42:04][352967354731485][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 21:42:04][352967354731485][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:42:04][352967354731485][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:42:04][352967354731485][382 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 21:42:04][352967354731485][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 21:42:04][352967354731485][506 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4180\nsuccessfulTxPacketsPerSecond: 0.5546385384112097\nretriedTxPackets: 792\nretriedTxPacketsPerSecond: 0.162738253785325\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4201\nsuccessfulRxPacketsPerSecond: 0.4948571390614985\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 21:42:04][352967354731485][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 21:42:06][352967354731485][1756 ms][DEBUG] SU: done in 1249 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.968/203.968/203.968/0.000 ms\n [2025-09-08 21:42:06][352967354731485][1756 ms][DEBUG] check_internet: online [2025-09-08 21:42:06][352967354731485][1756 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:42:06][352967354731485][1756 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354731485\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2755\"}'\'' -e'"" [2025-09-08 21:42:06][352967354731485][1756 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:42:06][352967354731485][1756 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354731485\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2755\"}'\'' -e'"" [2025-09-08 21:42:11][352967354731485][7207 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9da7a6ca-7a1f-4f12-a3d5-b0a617a20f81","id":"QR_9da7a6ca-7a1f-4f12-a3d5-b0a617a20f81","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:42:11][352967354731485][7364 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-09-08 21:42:11][352967354731485][7364 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-08 21:42:11][352967354731485][7364 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:42:15][352967354731485][0 ms][INFO] === Request start === [2025-09-08 21:42:15][352967354731485][1 ms][DEBUG] START check_scloud [2025-09-08 21:42:15][352967354731485][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:42:15][352967354731485][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 21729 817 24562248 207276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:42:15][352967354731485][318 ms][DEBUG] targetPkg: running [2025-09-08 21:42:15][352967354731485][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 21:42:15][352967354731485][318 ms][DEBUG] START check_boot_completed [2025-09-08 21:42:15][352967354731485][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:42:15][352967354731485][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 21:42:15][352967354731485][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:42:15][352967354731485][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 21:42:15][352967354731485][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 21:42:15][352967354731485][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 21:42:15][352967354731485][536 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4180\nsuccessfulTxPacketsPerSecond: 0.5546385384112097\nretriedTxPackets: 792\nretriedTxPacketsPerSecond: 0.162738253785325\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4201\nsuccessfulRxPacketsPerSecond: 0.4948571390614985\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 21:42:15][352967354731485][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 21:42:16][352967354731485][1036 ms][DEBUG] SU: done in 499 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.535/197.535/197.535/0.000 ms\n [2025-09-08 21:42:16][352967354731485][1036 ms][DEBUG] check_internet: online [2025-09-08 21:42:16][352967354731485][1036 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:42:16][352967354731485][1036 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354731485\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9336\"}'\'' -e'"" [2025-09-08 21:42:16][352967354731485][1036 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:42:16][352967354731485][1036 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354731485\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9336\"}'\'' -e'"" [2025-09-08 21:42:20][352967354731485][4832 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6278cd5a-6fbc-4bb0-8de8-11884b2f920f","id":"QR_6278cd5a-6fbc-4bb0-8de8-11884b2f920f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:42:20][352967354731485][4988 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-09-08 21:42:20][352967354731485][4988 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-08 21:42:20][352967354731485][4988 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:43:04][352861980470727][0 ms][INFO] === Request start === [2025-09-08 21:43:04][352861980470727][1 ms][DEBUG] START check_scloud [2025-09-08 21:43:04][352861980470727][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:43:05][352861980470727][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 21729 817 24694344 218060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:43:05][352861980470727][312 ms][DEBUG] targetPkg: running [2025-09-08 21:43:05][352861980470727][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 21:43:05][352861980470727][312 ms][DEBUG] START check_boot_completed [2025-09-08 21:43:05][352861980470727][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:43:05][352861980470727][357 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 21:43:05][352861980470727][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:43:05][352861980470727][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 21:43:05][352861980470727][420 ms][DEBUG] END check_boot_completed in 107 ms [2025-09-08 21:43:05][352861980470727][420 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:43:05][352861980470727][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352861980470727\",\"model\":\"SM-A235M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1829\"}'\'' -e'"" [2025-09-08 21:43:05][352861980470727][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:43:05][352861980470727][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352861980470727\",\"model\":\"SM-A235M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1829\"}'\'' -e'"" [2025-09-08 21:43:09][352861980470727][5106 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_befd1a70-e32a-439d-a0ce-a8feb98f12a9","id":"QR_befd1a70-e32a-439d-a0ce-a8feb98f12a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:43:10][352861980470727][5262 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-08 21:43:10][352861980470727][5262 ms][DEBUG] END runCmdUntilRes#1 in 4843 ms [2025-09-08 21:43:10][352861980470727][5262 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:43:13][352861980470727][0 ms][INFO] === Request start === [2025-09-08 21:43:13][352861980470727][1 ms][DEBUG] START check_scloud [2025-09-08 21:43:13][352861980470727][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:43:13][352861980470727][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 21729 817 24865488 229696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:43:13][352861980470727][292 ms][DEBUG] targetPkg: running [2025-09-08 21:43:13][352861980470727][292 ms][DEBUG] END check_scloud in 292 ms [2025-09-08 21:43:13][352861980470727][292 ms][DEBUG] START check_boot_completed [2025-09-08 21:43:13][352861980470727][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:43:13][352861980470727][339 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 21:43:13][352861980470727][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:43:14][352861980470727][401 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 21:43:14][352861980470727][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 21:43:14][352861980470727][402 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:43:14][352861980470727][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352861980470727\",\"model\":\"SM-A235M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4038\"}'\'' -e'"" [2025-09-08 21:43:14][352861980470727][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:43:14][352861980470727][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352861980470727\",\"model\":\"SM-A235M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4038\"}'\'' -e'"" [2025-09-08 21:43:17][352861980470727][3885 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8110e47c-87cd-4937-b7d6-40191e9ffbbb","id":"QR_8110e47c-87cd-4937-b7d6-40191e9ffbbb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:43:17][352861980470727][4041 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-09-08 21:43:17][352861980470727][4041 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-09-08 21:43:17][352861980470727][4041 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:46:06][356663765196964][1 ms][INFO] === Request start === [2025-09-08 21:46:06][356663765196964][1 ms][DEBUG] START check_scloud [2025-09-08 21:46:06][356663765196964][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:46:06][356663765196964][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 21729 817 24971276 234036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:46:06][356663765196964][273 ms][DEBUG] targetPkg: running [2025-09-08 21:46:06][356663765196964][274 ms][DEBUG] END check_scloud in 272 ms [2025-09-08 21:46:06][356663765196964][274 ms][DEBUG] START check_boot_completed [2025-09-08 21:46:06][356663765196964][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:46:06][356663765196964][320 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 21:46:06][356663765196964][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:46:07][356663765196964][367 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:46:07][356663765196964][367 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 21:46:07][356663765196964][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 21:46:07][356663765196964][508 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4287\nsuccessfulTxPacketsPerSecond: 0.4253238622586685\nretriedTxPackets: 819\nretriedTxPacketsPerSecond: 0.10732471290639298\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4297\nsuccessfulRxPacketsPerSecond: 0.38159897922273056\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 21:46:07][356663765196964][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 21:46:08][356663765196964][1757 ms][DEBUG] SU: done in 1249 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.528/203.528/203.528/0.000 ms\n [2025-09-08 21:46:08][356663765196964][1757 ms][DEBUG] check_internet: online [2025-09-08 21:46:08][356663765196964][1758 ms][DEBUG] rawBody.length=1170 [2025-09-08 21:46:08][356663765196964][1758 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663765196964\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9YTA0B1FEV\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7501\"}'\'' -e'"" [2025-09-08 21:46:08][356663765196964][1758 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:46:08][356663765196964][1758 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663765196964\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9YTA0B1FEV\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7501\"}'\'' -e'"" [2025-09-08 21:46:12][356663765196964][5694 ms][DEBUG] proc_open done in 3936 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 21:46:12][356663765196964][5694 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-09-08 21:46:12][356663765196964][5694 ms][WARN] Detected error: Process with pid 21729 either refused to load frida-agent, or terminated during injectionProcess with pid 21729 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 21:46:12][356663765196964][5695 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 21:46:12][356663765196964][5975 ms][DEBUG] SU: done in 280 ms; outsystem 1031 817 12938620 196800 ep_poll 0 S system_server\n [2025-09-08 21:46:12][356663765196964][5975 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 21:46:12][356663765196964][6100 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 21:46:12][356663765196964][6100 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 21:46:12][356663765196964][6100 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 21:46:12][356663765196964][6256 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 21:46:12][356663765196964][6256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 21:46:13][356663765196964][6428 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 21:46:15][356663765196964][8443 ms][DEBUG] START check_boot_completed [2025-09-08 21:46:15][356663765196964][8443 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:46:15][356663765196964][8490 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 21:46:15][356663765196964][8490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:46:15][356663765196964][8537 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:46:15][356663765196964][8537 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 21:46:18][356663765196964][11552 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 21:46:18][356663765196964][11552 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663765196964\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9YTA0B1FEV\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7501\"}'\'' -e'"" [2025-09-08 21:46:23][356663765196964][16722 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dbc55f37-add0-48ea-ad26-f655eb66a790","id":"QR_dbc55f37-add0-48ea-ad26-f655eb66a790","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:46:23][356663765196964][16879 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-08 21:46:23][356663765196964][16879 ms][DEBUG] END runCmdUntilRes#2 in 5327 ms [2025-09-08 21:46:23][356663765196964][16879 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:48:04][357799156402238][0 ms][INFO] === Request start === [2025-09-08 21:48:04][357799156402238][1 ms][DEBUG] START check_scloud [2025-09-08 21:48:04][357799156402238][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:48:04][357799156402238][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 23534 817 23608336 126888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:48:04][357799156402238][328 ms][DEBUG] targetPkg: running [2025-09-08 21:48:04][357799156402238][328 ms][DEBUG] END check_scloud in 328 ms [2025-09-08 21:48:04][357799156402238][328 ms][DEBUG] START check_boot_completed [2025-09-08 21:48:04][357799156402238][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:48:04][357799156402238][360 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 21:48:04][357799156402238][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:48:04][357799156402238][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:48:04][357799156402238][406 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 21:48:04][357799156402238][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 21:48:05][357799156402238][516 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4441\nsuccessfulTxPacketsPerSecond: 0.5218216318785579\nretriedTxPackets: 858\nretriedTxPacketsPerSecond: 0.13214963404716726\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4437\nsuccessfulRxPacketsPerSecond: 0.47438330170777987\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 21:48:05][357799156402238][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 21:48:05][357799156402238][875 ms][DEBUG] SU: done in 359 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.050/245.050/245.050/0.000 ms\n [2025-09-08 21:48:05][357799156402238][876 ms][DEBUG] check_internet: online [2025-09-08 21:48:05][357799156402238][876 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:48:05][357799156402238][876 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799156402238\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9448\"}'\'' -e'"" [2025-09-08 21:48:05][357799156402238][876 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:48:05][357799156402238][876 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799156402238\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9448\"}'\'' -e'"" [2025-09-08 21:48:10][357799156402238][6233 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b5ead3ec-b701-4fd4-a51b-e600d40df45f","id":"QR_b5ead3ec-b701-4fd4-a51b-e600d40df45f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:48:10][357799156402238][6389 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-09-08 21:48:10][357799156402238][6389 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-08 21:48:10][357799156402238][6389 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:48:14][357799156402238][1 ms][INFO] === Request start === [2025-09-08 21:48:14][357799156402238][1 ms][DEBUG] START check_scloud [2025-09-08 21:48:14][357799156402238][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:48:14][357799156402238][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 23534 817 23771724 137872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:48:14][357799156402238][303 ms][DEBUG] targetPkg: running [2025-09-08 21:48:14][357799156402238][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-08 21:48:14][357799156402238][303 ms][DEBUG] START check_boot_completed [2025-09-08 21:48:14][357799156402238][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:48:14][357799156402238][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 21:48:14][357799156402238][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:48:14][357799156402238][398 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 21:48:14][357799156402238][398 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 21:48:14][357799156402238][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 21:48:14][357799156402238][537 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4441\nsuccessfulTxPacketsPerSecond: 0.5218216318785579\nretriedTxPackets: 858\nretriedTxPacketsPerSecond: 0.13214963404716726\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4437\nsuccessfulRxPacketsPerSecond: 0.47438330170777987\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 21:48:14][357799156402238][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 21:48:15][357799156402238][928 ms][DEBUG] SU: done in 390 ms; outPING google.com (172.253.63.100) 56(84) bytes of data.\n64 bytes from bi-in-f100.1e100.net (172.253.63.100): icmp_seq=1 ttl=106 time=274 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 274.599/274.599/274.599/0.000 ms\n [2025-09-08 21:48:15][357799156402238][928 ms][DEBUG] check_internet: online [2025-09-08 21:48:15][357799156402238][928 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:48:15][357799156402238][928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799156402238\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4676\"}'\'' -e'"" [2025-09-08 21:48:15][357799156402238][928 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:48:15][357799156402238][928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799156402238\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4676\"}'\'' -e'"" [2025-09-08 21:48:19][357799156402238][4614 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab9aeb94-28ac-4085-94c6-834a31422adb","id":"QR_ab9aeb94-28ac-4085-94c6-834a31422adb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:48:19][357799156402238][4770 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-09-08 21:48:19][357799156402238][4770 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-09-08 21:48:19][357799156402238][4770 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:51:04][356544395309179][1 ms][INFO] === Request start === [2025-09-08 21:51:04][356544395309179][1 ms][DEBUG] START check_scloud [2025-09-08 21:51:04][356544395309179][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:51:05][356544395309179][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 23534 817 23906920 149612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:51:05][356544395309179][298 ms][DEBUG] targetPkg: running [2025-09-08 21:51:05][356544395309179][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-08 21:51:05][356544395309179][298 ms][DEBUG] START check_boot_completed [2025-09-08 21:51:05][356544395309179][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:51:05][356544395309179][329 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 21:51:05][356544395309179][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:51:05][356544395309179][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:51:05][356544395309179][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 21:51:05][356544395309179][376 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:51:05][356544395309179][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544395309179\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9376\"}'\'' -e'"" [2025-09-08 21:51:05][356544395309179][376 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:51:05][356544395309179][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544395309179\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9376\"}'\'' -e'"" [2025-09-08 21:51:12][356544395309179][7514 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a78dc2a-2175-400b-a798-b4bf71e9e1da","id":"QR_1a78dc2a-2175-400b-a798-b4bf71e9e1da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:51:12][356544395309179][7671 ms][DEBUG] proc_open done in 7294 ms; code=255; res.len=3343 [2025-09-08 21:51:12][356544395309179][7671 ms][DEBUG] END runCmdUntilRes#1 in 7295 ms [2025-09-08 21:51:12][356544395309179][7671 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:51:16][356544395309179][0 ms][INFO] === Request start === [2025-09-08 21:51:16][356544395309179][1 ms][DEBUG] START check_scloud [2025-09-08 21:51:16][356544395309179][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:51:16][356544395309179][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 23534 817 24078256 160668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:51:16][356544395309179][311 ms][DEBUG] targetPkg: running [2025-09-08 21:51:16][356544395309179][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 21:51:16][356544395309179][311 ms][DEBUG] START check_boot_completed [2025-09-08 21:51:16][356544395309179][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:51:16][356544395309179][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 21:51:16][356544395309179][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:51:16][356544395309179][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:51:16][356544395309179][390 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 21:51:16][356544395309179][390 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:51:16][356544395309179][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544395309179\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4781\"}'\'' -e'"" [2025-09-08 21:51:16][356544395309179][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:51:16][356544395309179][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544395309179\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4781\"}'\'' -e'"" [2025-09-08 21:51:20][356544395309179][4388 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f555a8b7-01d5-4394-90ba-e79319f281d8","id":"QR_f555a8b7-01d5-4394-90ba-e79319f281d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:51:20][356544395309179][4544 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-09-08 21:51:20][356544395309179][4544 ms][DEBUG] END runCmdUntilRes#1 in 4154 ms [2025-09-08 21:51:20][356544395309179][4544 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:53:04][352349697354731][0 ms][INFO] === Request start === [2025-09-08 21:53:04][352349697354731][1 ms][DEBUG] START check_scloud [2025-09-08 21:53:04][352349697354731][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:53:04][352349697354731][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 23534 817 24212592 171784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:53:04][352349697354731][314 ms][DEBUG] targetPkg: running [2025-09-08 21:53:04][352349697354731][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 21:53:04][352349697354731][314 ms][DEBUG] START check_boot_completed [2025-09-08 21:53:04][352349697354731][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:53:05][352349697354731][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 21:53:05][352349697354731][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:53:05][352349697354731][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 21:53:05][352349697354731][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 21:53:05][352349697354731][423 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:53:05][352349697354731][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349697354731\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6409\"}'\'' -e'"" [2025-09-08 21:53:05][352349697354731][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:53:05][352349697354731][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349697354731\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6409\"}'\'' -e'"" [2025-09-08 21:53:10][352349697354731][6047 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad3985d9-9fef-4c8f-af5a-e93439ddbe52","id":"QR_ad3985d9-9fef-4c8f-af5a-e93439ddbe52","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:53:10][352349697354731][6203 ms][DEBUG] proc_open done in 5779 ms; code=255; res.len=3343 [2025-09-08 21:53:10][352349697354731][6203 ms][DEBUG] END runCmdUntilRes#1 in 5779 ms [2025-09-08 21:53:10][352349697354731][6203 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:53:14][352349697354731][1 ms][INFO] === Request start === [2025-09-08 21:53:14][352349697354731][1 ms][DEBUG] START check_scloud [2025-09-08 21:53:14][352349697354731][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:53:14][352349697354731][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 23534 817 24379640 183480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:53:14][352349697354731][310 ms][DEBUG] targetPkg: running [2025-09-08 21:53:14][352349697354731][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 21:53:14][352349697354731][310 ms][DEBUG] START check_boot_completed [2025-09-08 21:53:14][352349697354731][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:53:14][352349697354731][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 21:53:14][352349697354731][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:53:14][352349697354731][419 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 21:53:14][352349697354731][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 21:53:14][352349697354731][419 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:53:14][352349697354731][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349697354731\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5884\"}'\'' -e'"" [2025-09-08 21:53:14][352349697354731][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:53:14][352349697354731][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349697354731\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5884\"}'\'' -e'"" [2025-09-08 21:53:19][352349697354731][5027 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8c42344-ab63-40af-90f0-71af48e34228","id":"QR_c8c42344-ab63-40af-90f0-71af48e34228","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:53:19][352349697354731][5183 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-08 21:53:19][352349697354731][5184 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-08 21:53:19][352349697354731][5184 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 21:56:04][358385395466686][1 ms][INFO] === Request start === [2025-09-08 21:56:04][358385395466686][1 ms][DEBUG] START check_scloud [2025-09-08 21:56:04][358385395466686][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:56:04][358385395466686][323 ms][DEBUG] SU: done in 321 ms; outu0_a118 23534 817 24515896 195040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:56:04][358385395466686][323 ms][DEBUG] targetPkg: running [2025-09-08 21:56:04][358385395466686][323 ms][DEBUG] END check_scloud in 321 ms [2025-09-08 21:56:04][358385395466686][323 ms][DEBUG] START check_boot_completed [2025-09-08 21:56:04][358385395466686][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:56:04][358385395466686][354 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 21:56:04][358385395466686][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:56:05][358385395466686][402 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 21:56:05][358385395466686][402 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-08 21:56:05][358385395466686][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 21:56:05][358385395466686][526 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4997\nsuccessfulTxPacketsPerSecond: 1.8773154942213017\nretriedTxPackets: 939\nretriedTxPacketsPerSecond: 0.12183168399076294\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5085\nsuccessfulRxPacketsPerSecond: 2.5141629332639264\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 21:56:05][358385395466686][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 21:56:06][358385395466686][1994 ms][DEBUG] SU: done in 1468 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.349/203.349/203.349/0.000 ms\n [2025-09-08 21:56:06][358385395466686][1994 ms][DEBUG] check_internet: online [2025-09-08 21:56:06][358385395466686][1994 ms][DEBUG] rawBody.length=1160 [2025-09-08 21:56:06][358385395466686][1994 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385395466686\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7029\"}'\'' -e'"" [2025-09-08 21:56:06][358385395466686][1994 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:56:06][358385395466686][1994 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385395466686\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7029\"}'\'' -e'"" [2025-09-08 21:56:10][358385395466686][6009 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 21:56:10][358385395466686][6165 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=115 [2025-09-08 21:56:10][358385395466686][6165 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-09-08 21:56:10][358385395466686][6165 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 21:56:11][][0 ms][INFO] === Request start === [2025-09-08 21:56:11][][1 ms][DEBUG] START check_scloud [2025-09-08 21:56:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:56:11][][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 23534 817 24644096 206872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:56:11][][267 ms][DEBUG] targetPkg: running [2025-09-08 21:56:11][][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-08 21:56:11][][267 ms][DEBUG] START check_boot_completed [2025-09-08 21:56:11][][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:56:11][][314 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 21:56:11][][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:56:11][][376 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 21:56:11][][376 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 21:56:11][][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 21:56:11][][485 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4997\nsuccessfulTxPacketsPerSecond: 1.8773154942213017\nretriedTxPackets: 939\nretriedTxPacketsPerSecond: 0.12183168399076294\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5085\nsuccessfulRxPacketsPerSecond: 2.5141629332639264\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 21:56:11][][486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 21:56:11][][751 ms][DEBUG] SU: done in 265 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=162 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 162.845/162.845/162.845/0.000 ms\n [2025-09-08 21:56:11][][751 ms][DEBUG] check_internet: online [2025-09-08 21:56:11][][751 ms][DEBUG] rawBody.length=1141 [2025-09-08 21:56:11][][751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CXB1KFXDW\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2158\"}'\'' -e'"" [2025-09-08 21:56:11][][751 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:56:11][][751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CXB1KFXDW\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2158\"}'\'' -e'"" [2025-09-08 21:56:15][][4375 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 21:56:15][][4531 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=115 [2025-09-08 21:56:15][][4531 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-08 21:56:15][][4531 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 21:56:16][358385395466686][0 ms][INFO] === Request start === [2025-09-08 21:56:16][358385395466686][1 ms][DEBUG] START check_scloud [2025-09-08 21:56:16][358385395466686][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 21:56:16][358385395466686][320 ms][DEBUG] SU: done in 320 ms; outu0_a118 23534 817 24778508 212640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 21:56:16][358385395466686][321 ms][DEBUG] targetPkg: running [2025-09-08 21:56:16][358385395466686][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-08 21:56:16][358385395466686][321 ms][DEBUG] START check_boot_completed [2025-09-08 21:56:16][358385395466686][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 21:56:16][358385395466686][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 21:56:16][358385395466686][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 21:56:16][358385395466686][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 21:56:16][358385395466686][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 21:56:16][358385395466686][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 21:56:16][358385395466686][524 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4997\nsuccessfulTxPacketsPerSecond: 1.8773154942213017\nretriedTxPackets: 939\nretriedTxPacketsPerSecond: 0.12183168399076294\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5085\nsuccessfulRxPacketsPerSecond: 2.5141629332639264\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 21:56:16][358385395466686][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 21:56:16][358385395466686][805 ms][DEBUG] SU: done in 281 ms; outPING google.com (172.253.63.139) 56(84) bytes of data.\n64 bytes from bi-in-f139.1e100.net (172.253.63.139): icmp_seq=1 ttl=106 time=165 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 165.337/165.337/165.337/0.000 ms\n [2025-09-08 21:56:16][358385395466686][805 ms][DEBUG] check_internet: online [2025-09-08 21:56:16][358385395466686][805 ms][DEBUG] rawBody.length=1150 [2025-09-08 21:56:16][358385395466686][805 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385395466686\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9822\"}'\'' -e'"" [2025-09-08 21:56:16][358385395466686][805 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 21:56:16][358385395466686][806 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385395466686\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9822\"}'\'' -e'"" [2025-09-08 21:56:20][358385395466686][4569 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_277f01bc-1718-49a6-b093-bb606375a126","id":"QR_277f01bc-1718-49a6-b093-bb606375a126","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 21:56:20][358385395466686][4725 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-08 21:56:20][358385395466686][4725 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-09-08 21:56:20][358385395466686][4725 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:01:05][356722916807596][1 ms][INFO] === Request start === [2025-09-08 22:01:05][356722916807596][1 ms][DEBUG] START check_scloud [2025-09-08 22:01:05][356722916807596][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:01:05][356722916807596][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 23534 817 24877992 224892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:01:05][356722916807596][306 ms][DEBUG] targetPkg: running [2025-09-08 22:01:05][356722916807596][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-08 22:01:05][356722916807596][306 ms][DEBUG] START check_boot_completed [2025-09-08 22:01:05][356722916807596][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:01:05][356722916807596][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 22:01:05][356722916807596][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:01:05][356722916807596][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:01:05][356722916807596][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 22:01:05][356722916807596][385 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:01:05][356722916807596][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722916807596\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4845\"}'\'' -e'"" [2025-09-08 22:01:05][356722916807596][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:01:05][356722916807596][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722916807596\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4845\"}'\'' -e'"" [2025-09-08 22:01:11][356722916807596][6430 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2eebf1bf-009a-4824-8b19-3a3f670b83dc","id":"QR_2eebf1bf-009a-4824-8b19-3a3f670b83dc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:01:11][356722916807596][6586 ms][DEBUG] proc_open done in 6201 ms; code=255; res.len=3343 [2025-09-08 22:01:11][356722916807596][6586 ms][DEBUG] END runCmdUntilRes#1 in 6202 ms [2025-09-08 22:01:11][356722916807596][6586 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:01:15][356722916807596][0 ms][INFO] === Request start === [2025-09-08 22:01:15][356722916807596][1 ms][DEBUG] START check_scloud [2025-09-08 22:01:15][356722916807596][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:01:15][356722916807596][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 23534 817 25034800 235744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:01:15][356722916807596][292 ms][DEBUG] targetPkg: running [2025-09-08 22:01:15][356722916807596][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-08 22:01:15][356722916807596][292 ms][DEBUG] START check_boot_completed [2025-09-08 22:01:15][356722916807596][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:01:15][356722916807596][339 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 22:01:15][356722916807596][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:01:15][356722916807596][401 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 22:01:15][356722916807596][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 22:01:15][356722916807596][401 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:01:15][356722916807596][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722916807596\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5000\"}'\'' -e'"" [2025-09-08 22:01:15][356722916807596][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:01:15][356722916807596][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722916807596\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5000\"}'\'' -e'"" [2025-09-08 22:01:19][356722916807596][4431 ms][DEBUG] proc_open done in 4030 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 22:01:19][356722916807596][4431 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-08 22:01:19][356722916807596][4431 ms][WARN] Detected error: Process with pid 23534 either refused to load frida-agent, or terminated during injectionProcess with pid 23534 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 22:01:19][356722916807596][4431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 22:01:19][356722916807596][4728 ms][DEBUG] SU: done in 297 ms; outsystem 1031 817 12946256 184464 ep_poll 0 S system_server\n [2025-09-08 22:01:19][356722916807596][4728 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 22:01:20][356722916807596][4869 ms][DEBUG] SU: done in 141 ms; out [2025-09-08 22:01:20][356722916807596][4869 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 22:01:20][356722916807596][4869 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 22:01:20][356722916807596][5009 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 22:01:20][356722916807596][5009 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 22:01:20][356722916807596][5228 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 22:01:22][356722916807596][7243 ms][DEBUG] START check_boot_completed [2025-09-08 22:01:22][356722916807596][7243 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:01:22][356722916807596][7290 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 22:01:22][356722916807596][7290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:01:22][356722916807596][7368 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 22:01:22][356722916807596][7368 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 22:01:25][356722916807596][10383 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 22:01:25][356722916807596][10383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722916807596\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5000\"}'\'' -e'"" [2025-09-08 22:01:29][356722916807596][14085 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81e4bf4d-5c28-426a-afe4-b5917d1dc59c","id":"QR_81e4bf4d-5c28-426a-afe4-b5917d1dc59c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:01:29][356722916807596][14241 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-08 22:01:29][356722916807596][14241 ms][DEBUG] END runCmdUntilRes#2 in 3859 ms [2025-09-08 22:01:29][356722916807596][14242 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:02:04][351672491003167][0 ms][INFO] === Request start === [2025-09-08 22:02:04][351672491003167][1 ms][DEBUG] START check_scloud [2025-09-08 22:02:04][351672491003167][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:02:05][351672491003167][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 25549 817 23596316 126116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:02:05][351672491003167][315 ms][DEBUG] targetPkg: running [2025-09-08 22:02:05][351672491003167][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 22:02:05][351672491003167][315 ms][DEBUG] START check_boot_completed [2025-09-08 22:02:05][351672491003167][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:02:05][351672491003167][346 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 22:02:05][351672491003167][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:02:05][351672491003167][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:02:05][351672491003167][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 22:02:05][351672491003167][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:02:05][351672491003167][518 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5106\nsuccessfulTxPacketsPerSecond: 0.36199034913803124\nretriedTxPackets: 983\nretriedTxPacketsPerSecond: 0.14612454460617774\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5168\nsuccessfulRxPacketsPerSecond: 0.27564402732528986\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:02:05][351672491003167][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:02:06][351672491003167][1846 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.460/199.460/199.460/0.000 ms\n [2025-09-08 22:02:06][351672491003167][1846 ms][DEBUG] check_internet: online [2025-09-08 22:02:06][351672491003167][1846 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:02:06][351672491003167][1846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672491003167\",\"model\":\"SM-S908W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3434\"}'\'' -e'"" [2025-09-08 22:02:06][351672491003167][1846 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:02:06][351672491003167][1846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672491003167\",\"model\":\"SM-S908W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3434\"}'\'' -e'"" [2025-09-08 22:02:11][351672491003167][7001 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81cdb43f-4964-443d-b2bb-f29d451c04ea","id":"QR_81cdb43f-4964-443d-b2bb-f29d451c04ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:02:11][351672491003167][7157 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-08 22:02:11][351672491003167][7157 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-08 22:02:11][351672491003167][7157 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:02:15][351672491003167][0 ms][INFO] === Request start === [2025-09-08 22:02:15][351672491003167][1 ms][DEBUG] START check_scloud [2025-09-08 22:02:15][351672491003167][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:02:15][351672491003167][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 25549 817 23733696 136880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:02:15][351672491003167][253 ms][DEBUG] targetPkg: running [2025-09-08 22:02:15][351672491003167][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-08 22:02:15][351672491003167][253 ms][DEBUG] START check_boot_completed [2025-09-08 22:02:15][351672491003167][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:02:15][351672491003167][299 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 22:02:15][351672491003167][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:02:15][351672491003167][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:02:15][351672491003167][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 22:02:15][351672491003167][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:02:15][351672491003167][439 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5106\nsuccessfulTxPacketsPerSecond: 0.36199034913803124\nretriedTxPackets: 983\nretriedTxPacketsPerSecond: 0.14612454460617774\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5168\nsuccessfulRxPacketsPerSecond: 0.27564402732528986\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:02:15][351672491003167][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:02:16][351672491003167][769 ms][DEBUG] SU: done in 329 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=240 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 240.700/240.700/240.700/0.000 ms\n [2025-09-08 22:02:16][351672491003167][769 ms][DEBUG] check_internet: online [2025-09-08 22:02:16][351672491003167][769 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:02:16][351672491003167][769 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672491003167\",\"model\":\"SM-S908W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8571\"}'\'' -e'"" [2025-09-08 22:02:16][351672491003167][769 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:02:16][351672491003167][769 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672491003167\",\"model\":\"SM-S908W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8571\"}'\'' -e'"" [2025-09-08 22:02:20][351672491003167][4704 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1dd4d905-dd21-444c-a1be-99e39475e68a","id":"QR_1dd4d905-dd21-444c-a1be-99e39475e68a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:02:20][351672491003167][4860 ms][DEBUG] proc_open done in 4091 ms; code=255; res.len=3343 [2025-09-08 22:02:20][351672491003167][4860 ms][DEBUG] END runCmdUntilRes#1 in 4091 ms [2025-09-08 22:02:20][351672491003167][4860 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:08:04][352682505591551][1 ms][INFO] === Request start === [2025-09-08 22:08:04][352682505591551][1 ms][DEBUG] START check_scloud [2025-09-08 22:08:04][352682505591551][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:08:04][352682505591551][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 25549 817 23842036 148676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:08:04][352682505591551][318 ms][DEBUG] targetPkg: running [2025-09-08 22:08:04][352682505591551][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 22:08:04][352682505591551][319 ms][DEBUG] START check_boot_completed [2025-09-08 22:08:04][352682505591551][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:08:04][352682505591551][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 22:08:04][352682505591551][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:08:04][352682505591551][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:08:04][352682505591551][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 22:08:04][352682505591551][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:08:04][352682505591551][521 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5240\nsuccessfulTxPacketsPerSecond: 0.4450526092039537\nretriedTxPackets: 1036\nretriedTxPacketsPerSecond: 0.17602827080454883\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5274\nsuccessfulRxPacketsPerSecond: 0.35205654160909766\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:08:04][352682505591551][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:08:06][352682505591551][1802 ms][DEBUG] SU: done in 1280 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.656/204.656/204.656/0.000 ms\n [2025-09-08 22:08:06][352682505591551][1802 ms][DEBUG] check_internet: online [2025-09-08 22:08:06][352682505591551][1802 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:08:06][352682505591551][1802 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682505591551\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CHO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1175\"}'\'' -e'"" [2025-09-08 22:08:06][352682505591551][1802 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:08:06][352682505591551][1802 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682505591551\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CHO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1175\"}'\'' -e'"" [2025-09-08 22:08:11][352682505591551][7363 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39be6372-631e-4127-961f-d941fb3f5256","id":"QR_39be6372-631e-4127-961f-d941fb3f5256","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:08:11][352682505591551][7520 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-08 22:08:11][352682505591551][7520 ms][DEBUG] END runCmdUntilRes#1 in 5718 ms [2025-09-08 22:08:11][352682505591551][7520 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:08:15][352682505591551][0 ms][INFO] === Request start === [2025-09-08 22:08:15][352682505591551][1 ms][DEBUG] START check_scloud [2025-09-08 22:08:15][352682505591551][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:08:15][352682505591551][243 ms][DEBUG] SU: done in 242 ms; outu0_a118 25549 817 24020924 159560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:08:15][352682505591551][243 ms][DEBUG] targetPkg: running [2025-09-08 22:08:15][352682505591551][243 ms][DEBUG] END check_scloud in 242 ms [2025-09-08 22:08:15][352682505591551][243 ms][DEBUG] START check_boot_completed [2025-09-08 22:08:15][352682505591551][243 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:08:15][352682505591551][274 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 22:08:15][352682505591551][274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:08:15][352682505591551][321 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:08:15][352682505591551][321 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 22:08:15][352682505591551][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:08:15][352682505591551][430 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5240\nsuccessfulTxPacketsPerSecond: 0.4450526092039537\nretriedTxPackets: 1036\nretriedTxPacketsPerSecond: 0.17602827080454883\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5274\nsuccessfulRxPacketsPerSecond: 0.35205654160909766\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:08:15][352682505591551][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:08:16][352682505591551][774 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.631/239.631/239.631/0.000 ms\n [2025-09-08 22:08:16][352682505591551][774 ms][DEBUG] check_internet: online [2025-09-08 22:08:16][352682505591551][774 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:08:16][352682505591551][774 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682505591551\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3432\"}'\'' -e'"" [2025-09-08 22:08:16][352682505591551][774 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:08:16][352682505591551][775 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682505591551\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3432\"}'\'' -e'"" [2025-09-08 22:08:20][352682505591551][4914 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f02fa996-97e8-414c-9d6b-dc8fa432f796","id":"QR_f02fa996-97e8-414c-9d6b-dc8fa432f796","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:08:20][352682505591551][5070 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-09-08 22:08:20][352682505591551][5070 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-09-08 22:08:20][352682505591551][5070 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:11:03][350524540539306][1 ms][INFO] === Request start === [2025-09-08 22:11:03][350524540539306][1 ms][DEBUG] START check_scloud [2025-09-08 22:11:03][350524540539306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:11:04][350524540539306][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 25549 817 24159228 171044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:11:04][350524540539306][302 ms][DEBUG] targetPkg: running [2025-09-08 22:11:04][350524540539306][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-08 22:11:04][350524540539306][302 ms][DEBUG] START check_boot_completed [2025-09-08 22:11:04][350524540539306][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:11:04][350524540539306][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 22:11:04][350524540539306][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:11:04][350524540539306][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:11:04][350524540539306][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 22:11:04][350524540539306][380 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:11:04][350524540539306][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350524540539306\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1960\"}'\'' -e'"" [2025-09-08 22:11:04][350524540539306][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:11:04][350524540539306][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350524540539306\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1960\"}'\'' -e'"" [2025-09-08 22:11:08][350524540539306][5004 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27525f6d-32b8-4c95-887c-a971b739da86","id":"QR_27525f6d-32b8-4c95-887c-a971b739da86","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:11:09][350524540539306][5160 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-09-08 22:11:09][350524540539306][5160 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-08 22:11:09][350524540539306][5160 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:11:11][350524540539306][0 ms][INFO] === Request start === [2025-09-08 22:11:11][350524540539306][1 ms][DEBUG] START check_scloud [2025-09-08 22:11:11][350524540539306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:11:11][350524540539306][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 25549 817 24287364 182812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:11:11][350524540539306][308 ms][DEBUG] targetPkg: running [2025-09-08 22:11:11][350524540539306][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 22:11:11][350524540539306][308 ms][DEBUG] START check_boot_completed [2025-09-08 22:11:11][350524540539306][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:11:11][350524540539306][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 22:11:11][350524540539306][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:11:11][350524540539306][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:11:11][350524540539306][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 22:11:11][350524540539306][401 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:11:11][350524540539306][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350524540539306\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8200\"}'\'' -e'"" [2025-09-08 22:11:11][350524540539306][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:11:11][350524540539306][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350524540539306\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8200\"}'\'' -e'"" [2025-09-08 22:11:17][350524540539306][6134 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d70fef91-2a4f-433a-bf62-dae78e254335","id":"QR_d70fef91-2a4f-433a-bf62-dae78e254335","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:11:17][350524540539306][6291 ms][DEBUG] proc_open done in 5889 ms; code=255; res.len=3343 [2025-09-08 22:11:17][350524540539306][6291 ms][DEBUG] END runCmdUntilRes#1 in 5889 ms [2025-09-08 22:11:17][350524540539306][6291 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:23:05][350455580469817][1 ms][INFO] === Request start === [2025-09-08 22:23:05][350455580469817][1 ms][DEBUG] START check_scloud [2025-09-08 22:23:05][350455580469817][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:23:05][350455580469817][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 25549 817 24400268 194684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:23:05][350455580469817][254 ms][DEBUG] targetPkg: running [2025-09-08 22:23:05][350455580469817][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-08 22:23:05][350455580469817][255 ms][DEBUG] START check_boot_completed [2025-09-08 22:23:05][350455580469817][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:23:05][350455580469817][301 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 22:23:05][350455580469817][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:23:05][350455580469817][349 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 22:23:05][350455580469817][349 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 22:23:05][350455580469817][349 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:23:05][350455580469817][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580469817\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7105\"}'\'' -e'"" [2025-09-08 22:23:05][350455580469817][349 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:23:05][350455580469817][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580469817\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7105\"}'\'' -e'"" [2025-09-08 22:23:10][350455580469817][5503 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 22:23:10][350455580469817][5659 ms][DEBUG] proc_open done in 5309 ms; code=255; res.len=115 [2025-09-08 22:23:10][350455580469817][5659 ms][DEBUG] END runCmdUntilRes#1 in 5309 ms [2025-09-08 22:23:10][350455580469817][5659 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 22:23:11][][0 ms][INFO] === Request start === [2025-09-08 22:23:11][][1 ms][DEBUG] START check_scloud [2025-09-08 22:23:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:23:11][][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 25549 817 24581340 206072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:23:11][][308 ms][DEBUG] targetPkg: running [2025-09-08 22:23:11][][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 22:23:11][][308 ms][DEBUG] START check_boot_completed [2025-09-08 22:23:11][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:23:11][][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 22:23:11][][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:23:11][][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 22:23:11][][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 22:23:11][][417 ms][DEBUG] rawBody.length=1141 [2025-09-08 22:23:11][][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58Y50AFJAX\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2371\"}'\'' -e'"" [2025-09-08 22:23:11][][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:23:11][][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58Y50AFJAX\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2371\"}'\'' -e'"" [2025-09-08 22:23:15][][4197 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-08 22:23:15][][4353 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=115 [2025-09-08 22:23:15][][4353 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-09-08 22:23:15][][4354 ms][INFO] SUCCESS response from frida (len=115) [2025-09-08 22:23:16][350455580469817][0 ms][INFO] === Request start === [2025-09-08 22:23:16][350455580469817][1 ms][DEBUG] START check_scloud [2025-09-08 22:23:16][350455580469817][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:23:16][350455580469817][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 25549 817 24742372 217732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:23:16][350455580469817][325 ms][DEBUG] targetPkg: running [2025-09-08 22:23:16][350455580469817][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 22:23:16][350455580469817][325 ms][DEBUG] START check_boot_completed [2025-09-08 22:23:16][350455580469817][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:23:16][350455580469817][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 22:23:16][350455580469817][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:23:16][350455580469817][419 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 22:23:16][350455580469817][419 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 22:23:16][350455580469817][419 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:23:16][350455580469817][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580469817\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9412\"}'\'' -e'"" [2025-09-08 22:23:16][350455580469817][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:23:16][350455580469817][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580469817\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9412\"}'\'' -e'"" [2025-09-08 22:23:20][350455580469817][4745 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72e3d421-6bb4-425f-8137-f9ba4598f27e","id":"QR_72e3d421-6bb4-425f-8137-f9ba4598f27e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:23:20][350455580469817][4902 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-09-08 22:23:20][350455580469817][4902 ms][DEBUG] END runCmdUntilRes#1 in 4482 ms [2025-09-08 22:23:20][350455580469817][4902 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:23:24][356241325084754][0 ms][INFO] === Request start === [2025-09-08 22:23:24][356241325084754][1 ms][DEBUG] START check_scloud [2025-09-08 22:23:24][356241325084754][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:23:24][356241325084754][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 25549 817 24899184 229288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:23:24][356241325084754][314 ms][DEBUG] targetPkg: running [2025-09-08 22:23:24][356241325084754][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 22:23:24][356241325084754][314 ms][DEBUG] START check_boot_completed [2025-09-08 22:23:24][356241325084754][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:23:24][356241325084754][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 22:23:24][356241325084754][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:23:24][356241325084754][424 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 22:23:24][356241325084754][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 22:23:24][356241325084754][424 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:23:24][356241325084754][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241325084754\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2903\"}'\'' -e'"" [2025-09-08 22:23:24][356241325084754][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:23:24][356241325084754][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241325084754\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2903\"}'\'' -e'"" [2025-09-08 22:23:29][356241325084754][4876 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7eb2552d-55e6-4524-ae8e-73ca8573779f","id":"QR_7eb2552d-55e6-4524-ae8e-73ca8573779f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:23:29][356241325084754][5032 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-08 22:23:29][356241325084754][5032 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-08 22:23:29][356241325084754][5032 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:23:32][356241325084754][0 ms][INFO] === Request start === [2025-09-08 22:23:32][356241325084754][1 ms][DEBUG] START check_scloud [2025-09-08 22:23:32][356241325084754][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:23:33][356241325084754][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 25549 817 25037488 240228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:23:33][356241325084754][312 ms][DEBUG] targetPkg: running [2025-09-08 22:23:33][356241325084754][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 22:23:33][356241325084754][312 ms][DEBUG] START check_boot_completed [2025-09-08 22:23:33][356241325084754][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:23:33][356241325084754][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 22:23:33][356241325084754][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:23:33][356241325084754][421 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 22:23:33][356241325084754][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 22:23:33][356241325084754][421 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:23:33][356241325084754][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241325084754\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7133\"}'\'' -e'"" [2025-09-08 22:23:33][356241325084754][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:23:33][356241325084754][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241325084754\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7133\"}'\'' -e'"" [2025-09-08 22:23:37][356241325084754][4435 ms][DEBUG] proc_open done in 4014 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 22:23:37][356241325084754][4436 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-09-08 22:23:37][356241325084754][4436 ms][WARN] Detected error: Process with pid 25549 either refused to load frida-agent, or terminated during injectionProcess with pid 25549 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 22:23:37][356241325084754][4436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 22:23:37][356241325084754][4701 ms][DEBUG] SU: done in 265 ms; outsystem 1031 817 12947856 188292 ep_poll 0 S system_server\n [2025-09-08 22:23:37][356241325084754][4701 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 22:23:37][356241325084754][4842 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 22:23:37][356241325084754][4842 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 22:23:37][356241325084754][4842 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 22:23:37][356241325084754][4966 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 22:23:37][356241325084754][4967 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 22:23:37][356241325084754][5154 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 22:23:39][356241325084754][7169 ms][DEBUG] START check_boot_completed [2025-09-08 22:23:39][356241325084754][7169 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:23:40][356241325084754][7216 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 22:23:40][356241325084754][7216 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:23:40][356241325084754][7278 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 22:23:40][356241325084754][7278 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 22:23:43][356241325084754][10293 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 22:23:43][356241325084754][10293 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356241325084754\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7133\"}'\'' -e'"" [2025-09-08 22:23:46][356241325084754][13621 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_323dc48a-7ae9-4102-a9df-579aa67d9425","id":"QR_323dc48a-7ae9-4102-a9df-579aa67d9425","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:23:46][356241325084754][13777 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-08 22:23:46][356241325084754][13777 ms][DEBUG] END runCmdUntilRes#2 in 3484 ms [2025-09-08 22:23:46][356241325084754][13777 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:28:04][359156946113765][1 ms][INFO] === Request start === [2025-09-08 22:28:04][359156946113765][1 ms][DEBUG] START check_scloud [2025-09-08 22:28:04][359156946113765][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:28:05][359156946113765][331 ms][DEBUG] SU: done in 330 ms; outu0_a118 27524 817 23679044 126912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:28:05][359156946113765][331 ms][DEBUG] targetPkg: running [2025-09-08 22:28:05][359156946113765][331 ms][DEBUG] END check_scloud in 330 ms [2025-09-08 22:28:05][359156946113765][331 ms][DEBUG] START check_boot_completed [2025-09-08 22:28:05][359156946113765][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:28:05][359156946113765][363 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 22:28:05][359156946113765][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:28:05][359156946113765][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:28:05][359156946113765][410 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 22:28:05][359156946113765][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:28:05][359156946113765][519 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5556\nsuccessfulTxPacketsPerSecond: 1.2365121026533592\nretriedTxPackets: 1136\nretriedTxPacketsPerSecond: 0.36162146398353323\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5535\nsuccessfulRxPacketsPerSecond: 0.9798775153102103\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:28:05][359156946113765][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:28:06][359156946113765][2097 ms][DEBUG] SU: done in 1577 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.921/201.921/201.921/0.000 ms\n [2025-09-08 22:28:06][359156946113765][2097 ms][DEBUG] check_internet: online [2025-09-08 22:28:06][359156946113765][2097 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:28:06][359156946113765][2097 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156946113765\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2477\"}'\'' -e'"" [2025-09-08 22:28:06][359156946113765][2097 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:28:06][359156946113765][2097 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156946113765\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2477\"}'\'' -e'"" [2025-09-08 22:28:11][359156946113765][7236 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3ddaeb56-e5dc-420f-9e63-bb9fa572c1bb","id":"QR_3ddaeb56-e5dc-420f-9e63-bb9fa572c1bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:28:12][359156946113765][7392 ms][DEBUG] proc_open done in 5296 ms; code=255; res.len=3343 [2025-09-08 22:28:12][359156946113765][7392 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-09-08 22:28:12][359156946113765][7393 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:28:15][359156946113765][0 ms][INFO] === Request start === [2025-09-08 22:28:15][359156946113765][1 ms][DEBUG] START check_scloud [2025-09-08 22:28:15][359156946113765][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:28:16][359156946113765][326 ms][DEBUG] SU: done in 326 ms; outu0_a118 27524 817 23807180 137868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:28:16][359156946113765][327 ms][DEBUG] targetPkg: running [2025-09-08 22:28:16][359156946113765][327 ms][DEBUG] END check_scloud in 326 ms [2025-09-08 22:28:16][359156946113765][327 ms][DEBUG] START check_boot_completed [2025-09-08 22:28:16][359156946113765][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:28:16][359156946113765][373 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 22:28:16][359156946113765][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:28:16][359156946113765][436 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 22:28:16][359156946113765][436 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 22:28:16][359156946113765][436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:28:16][359156946113765][592 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5556\nsuccessfulTxPacketsPerSecond: 1.2365121026533592\nretriedTxPackets: 1136\nretriedTxPacketsPerSecond: 0.36162146398353323\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5535\nsuccessfulRxPacketsPerSecond: 0.9798775153102103\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:28:16][359156946113765][592 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:28:16][359156946113765][920 ms][DEBUG] SU: done in 328 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=195 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 195.282/195.282/195.282/0.000 ms\n [2025-09-08 22:28:16][359156946113765][920 ms][DEBUG] check_internet: online [2025-09-08 22:28:16][359156946113765][920 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:28:16][359156946113765][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156946113765\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1851\"}'\'' -e'"" [2025-09-08 22:28:16][359156946113765][920 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:28:16][359156946113765][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156946113765\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1851\"}'\'' -e'"" [2025-09-08 22:28:20][359156946113765][4841 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e141f4cc-66e2-46c0-b7fb-c3396815d772","id":"QR_e141f4cc-66e2-46c0-b7fb-c3396815d772","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:28:20][359156946113765][4997 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-09-08 22:28:20][359156946113765][4997 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-09-08 22:28:20][359156946113765][4997 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:28:23][353684123325890][1 ms][INFO] === Request start === [2025-09-08 22:28:23][353684123325890][1 ms][DEBUG] START check_scloud [2025-09-08 22:28:23][353684123325890][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:28:24][353684123325890][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 27524 817 23946644 149020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:28:24][353684123325890][256 ms][DEBUG] targetPkg: running [2025-09-08 22:28:24][353684123325890][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-08 22:28:24][353684123325890][256 ms][DEBUG] START check_boot_completed [2025-09-08 22:28:24][353684123325890][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:28:24][353684123325890][287 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 22:28:24][353684123325890][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:28:24][353684123325890][334 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:28:24][353684123325890][334 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 22:28:24][353684123325890][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:28:24][353684123325890][461 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5556\nsuccessfulTxPacketsPerSecond: 1.2365121026533592\nretriedTxPackets: 1136\nretriedTxPacketsPerSecond: 0.36162146398353323\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5535\nsuccessfulRxPacketsPerSecond: 0.9798775153102103\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:28:24][353684123325890][461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:28:24][353684123325890][787 ms][DEBUG] SU: done in 327 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.241/216.241/216.241/0.000 ms\n [2025-09-08 22:28:24][353684123325890][788 ms][DEBUG] check_internet: online [2025-09-08 22:28:24][353684123325890][788 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:28:24][353684123325890][788 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684123325890\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2767\"}'\'' -e'"" [2025-09-08 22:28:24][353684123325890][788 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:28:24][353684123325890][788 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684123325890\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2767\"}'\'' -e'"" [2025-09-08 22:28:29][353684123325890][5630 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f9561891-8343-4095-b8b0-1adb3dbb9472","id":"QR_f9561891-8343-4095-b8b0-1adb3dbb9472","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:28:29][353684123325890][5786 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-08 22:28:29][353684123325890][5786 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-08 22:28:29][353684123325890][5786 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:28:33][353684123325890][0 ms][INFO] === Request start === [2025-09-08 22:28:33][353684123325890][1 ms][DEBUG] START check_scloud [2025-09-08 22:28:33][353684123325890][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:28:33][353684123325890][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 27524 817 24074936 158032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:28:33][353684123325890][321 ms][DEBUG] targetPkg: running [2025-09-08 22:28:33][353684123325890][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-08 22:28:33][353684123325890][321 ms][DEBUG] START check_boot_completed [2025-09-08 22:28:33][353684123325890][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:28:33][353684123325890][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 22:28:33][353684123325890][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:28:33][353684123325890][416 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 22:28:33][353684123325890][417 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-08 22:28:33][353684123325890][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:28:33][353684123325890][539 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5556\nsuccessfulTxPacketsPerSecond: 1.2365121026533592\nretriedTxPackets: 1136\nretriedTxPacketsPerSecond: 0.36162146398353323\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5535\nsuccessfulRxPacketsPerSecond: 0.9798775153102103\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:28:33][353684123325890][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:28:33][353684123325890][914 ms][DEBUG] SU: done in 374 ms; outPING google.com (172.253.63.101) 56(84) bytes of data.\n64 bytes from bi-in-f101.1e100.net (172.253.63.101): icmp_seq=1 ttl=106 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.069/245.069/245.069/0.000 ms\n [2025-09-08 22:28:33][353684123325890][914 ms][DEBUG] check_internet: online [2025-09-08 22:28:33][353684123325890][914 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:28:33][353684123325890][914 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684123325890\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2298\"}'\'' -e'"" [2025-09-08 22:28:33][353684123325890][914 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:28:33][353684123325890][914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684123325890\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2298\"}'\'' -e'"" [2025-09-08 22:28:37][353684123325890][4429 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d0a2ef0a-c058-4df9-8577-8eb20e47e2e3","id":"QR_d0a2ef0a-c058-4df9-8577-8eb20e47e2e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:28:37][353684123325890][4585 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=3343 [2025-09-08 22:28:37][353684123325890][4585 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-08 22:28:37][353684123325890][4585 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:32:03][353600813969284][1 ms][INFO] === Request start === [2025-09-08 22:32:03][353600813969284][1 ms][DEBUG] START check_scloud [2025-09-08 22:32:03][353600813969284][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:32:03][353600813969284][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 27524 817 24151892 169056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:32:03][353600813969284][293 ms][DEBUG] targetPkg: running [2025-09-08 22:32:03][353600813969284][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-08 22:32:03][353600813969284][293 ms][DEBUG] START check_boot_completed [2025-09-08 22:32:03][353600813969284][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:32:04][353600813969284][325 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 22:32:04][353600813969284][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:32:04][353600813969284][373 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 22:32:04][353600813969284][373 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 22:32:04][353600813969284][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:32:04][353600813969284][497 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5665\nsuccessfulTxPacketsPerSecond: 0.35655638497621867\nretriedTxPackets: 1173\nretriedTxPacketsPerSecond: 0.12103290132220267\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5630\nsuccessfulRxPacketsPerSecond: 0.31076015204349333\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:32:04][353600813969284][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:32:04][353600813969284][1028 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.901/200.901/200.901/0.000 ms\n [2025-09-08 22:32:04][353600813969284][1028 ms][DEBUG] check_internet: online [2025-09-08 22:32:04][353600813969284][1028 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:32:04][353600813969284][1028 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600813969284\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4694\"}'\'' -e'"" [2025-09-08 22:32:04][353600813969284][1028 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:32:04][353600813969284][1028 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600813969284\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4694\"}'\'' -e'"" [2025-09-08 22:32:08][353600813969284][4792 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f38ba5b-a281-4528-94de-9ea13a3b8deb","id":"QR_7f38ba5b-a281-4528-94de-9ea13a3b8deb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:32:08][353600813969284][4948 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-08 22:32:08][353600813969284][4948 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-09-08 22:32:08][353600813969284][4948 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:32:11][353600813969284][0 ms][INFO] === Request start === [2025-09-08 22:32:11][353600813969284][1 ms][DEBUG] START check_scloud [2025-09-08 22:32:11][353600813969284][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:32:11][353600813969284][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 27524 817 24296540 180804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:32:11][353600813969284][313 ms][DEBUG] targetPkg: running [2025-09-08 22:32:11][353600813969284][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-08 22:32:11][353600813969284][313 ms][DEBUG] START check_boot_completed [2025-09-08 22:32:11][353600813969284][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:32:11][353600813969284][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 22:32:11][353600813969284][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:32:11][353600813969284][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:32:11][353600813969284][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 22:32:11][353600813969284][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:32:11][353600813969284][547 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5665\nsuccessfulTxPacketsPerSecond: 0.35655638497621867\nretriedTxPackets: 1173\nretriedTxPacketsPerSecond: 0.12103290132220267\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5630\nsuccessfulRxPacketsPerSecond: 0.31076015204349333\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:32:11][353600813969284][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:32:11][353600813969284][875 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.428/194.428/194.428/0.000 ms\n [2025-09-08 22:32:11][353600813969284][875 ms][DEBUG] check_internet: online [2025-09-08 22:32:11][353600813969284][875 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:32:11][353600813969284][875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600813969284\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7957\"}'\'' -e'"" [2025-09-08 22:32:11][353600813969284][875 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:32:11][353600813969284][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600813969284\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7957\"}'\'' -e'"" [2025-09-08 22:32:17][353600813969284][6233 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d2699b36-f7db-44c2-89e7-c0b8d2947c36","id":"QR_d2699b36-f7db-44c2-89e7-c0b8d2947c36","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:32:17][353600813969284][6389 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-08 22:32:17][353600813969284][6389 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-08 22:32:17][353600813969284][6389 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:35:04][350640425608899][1 ms][INFO] === Request start === [2025-09-08 22:35:04][350640425608899][1 ms][DEBUG] START check_scloud [2025-09-08 22:35:04][350640425608899][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:35:04][350640425608899][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 27524 817 24412316 191964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:35:04][350640425608899][318 ms][DEBUG] targetPkg: running [2025-09-08 22:35:04][350640425608899][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-08 22:35:04][350640425608899][318 ms][DEBUG] START check_boot_completed [2025-09-08 22:35:04][350640425608899][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:35:04][350640425608899][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 22:35:04][350640425608899][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:35:04][350640425608899][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:35:04][350640425608899][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 22:35:04][350640425608899][396 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:35:04][350640425608899][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350640425608899\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3685\"}'\'' -e'"" [2025-09-08 22:35:04][350640425608899][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:35:04][350640425608899][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350640425608899\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3685\"}'\'' -e'"" [2025-09-08 22:35:10][350640425608899][6582 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68799701-7877-4ff0-8c90-de9c3ebc560b","id":"QR_68799701-7877-4ff0-8c90-de9c3ebc560b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:35:11][350640425608899][6738 ms][DEBUG] proc_open done in 6342 ms; code=255; res.len=3343 [2025-09-08 22:35:11][350640425608899][6738 ms][DEBUG] END runCmdUntilRes#1 in 6342 ms [2025-09-08 22:35:11][350640425608899][6738 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:35:14][350640425608899][0 ms][INFO] === Request start === [2025-09-08 22:35:14][350640425608899][1 ms][DEBUG] START check_scloud [2025-09-08 22:35:14][350640425608899][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:35:15][350640425608899][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 27524 817 24552740 203700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:35:15][350640425608899][325 ms][DEBUG] targetPkg: running [2025-09-08 22:35:15][350640425608899][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 22:35:15][350640425608899][325 ms][DEBUG] START check_boot_completed [2025-09-08 22:35:15][350640425608899][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:35:15][350640425608899][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 22:35:15][350640425608899][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:35:15][350640425608899][421 ms][DEBUG] SU: done in 49 ms; out [2025-09-08 22:35:15][350640425608899][421 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-08 22:35:15][350640425608899][421 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:35:15][350640425608899][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350640425608899\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6234\"}'\'' -e'"" [2025-09-08 22:35:15][350640425608899][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:35:15][350640425608899][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350640425608899\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6234\"}'\'' -e'"" [2025-09-08 22:35:18][350640425608899][4246 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6dc8d8c4-533c-4b58-a9d3-bdb2e27a8e30","id":"QR_6dc8d8c4-533c-4b58-a9d3-bdb2e27a8e30","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:35:19][350640425608899][4402 ms][DEBUG] proc_open done in 3981 ms; code=255; res.len=3343 [2025-09-08 22:35:19][350640425608899][4402 ms][DEBUG] END runCmdUntilRes#1 in 3981 ms [2025-09-08 22:35:19][350640425608899][4402 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:36:04][352826830639037][0 ms][INFO] === Request start === [2025-09-08 22:36:04][352826830639037][1 ms][DEBUG] START check_scloud [2025-09-08 22:36:04][352826830639037][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:36:05][352826830639037][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 27524 817 24658276 211944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:36:05][352826830639037][308 ms][DEBUG] targetPkg: running [2025-09-08 22:36:05][352826830639037][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 22:36:05][352826830639037][308 ms][DEBUG] START check_boot_completed [2025-09-08 22:36:05][352826830639037][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:36:05][352826830639037][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 22:36:05][352826830639037][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:36:05][352826830639037][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:36:05][352826830639037][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 22:36:05][352826830639037][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:36:05][352826830639037][497 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5748\nsuccessfulTxPacketsPerSecond: 0.2755918584188332\nretriedTxPackets: 1205\nretriedTxPacketsPerSecond: 0.10625228276388751\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5697\nsuccessfulRxPacketsPerSecond: 0.22246571703688947\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:36:05][352826830639037][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:36:06][352826830639037][1794 ms][DEBUG] SU: done in 1297 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.742/199.742/199.742/0.000 ms\n [2025-09-08 22:36:06][352826830639037][1794 ms][DEBUG] check_internet: online [2025-09-08 22:36:06][352826830639037][1794 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:36:06][352826830639037][1794 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352826830639037\",\"model\":\"SM-M536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2271\"}'\'' -e'"" [2025-09-08 22:36:06][352826830639037][1795 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:36:06][352826830639037][1795 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352826830639037\",\"model\":\"SM-M536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2271\"}'\'' -e'"" [2025-09-08 22:36:11][352826830639037][6838 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_edbcd57b-4a5d-4260-87f0-bf9152b09841","id":"QR_edbcd57b-4a5d-4260-87f0-bf9152b09841","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:36:11][352826830639037][6994 ms][DEBUG] proc_open done in 5199 ms; code=255; res.len=3343 [2025-09-08 22:36:11][352826830639037][6994 ms][DEBUG] END runCmdUntilRes#1 in 5199 ms [2025-09-08 22:36:11][352826830639037][6994 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:38:04][352460887246742][1 ms][INFO] === Request start === [2025-09-08 22:38:04][352460887246742][1 ms][DEBUG] START check_scloud [2025-09-08 22:38:04][352460887246742][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:38:04][352460887246742][253 ms][DEBUG] SU: done in 251 ms; outu0_a118 27524 817 24798792 223952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:38:04][352460887246742][253 ms][DEBUG] targetPkg: running [2025-09-08 22:38:04][352460887246742][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-08 22:38:04][352460887246742][253 ms][DEBUG] START check_boot_completed [2025-09-08 22:38:04][352460887246742][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:38:04][352460887246742][299 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 22:38:04][352460887246742][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:38:04][352460887246742][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:38:04][352460887246742][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 22:38:04][352460887246742][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:38:04][352460887246742][487 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5748\nsuccessfulTxPacketsPerSecond: 0.2755918584188332\nretriedTxPackets: 1205\nretriedTxPacketsPerSecond: 0.10625228276388751\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5697\nsuccessfulRxPacketsPerSecond: 0.22246571703688947\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:38:04][352460887246742][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:38:06][352460887246742][1815 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.744/198.744/198.744/0.000 ms\n [2025-09-08 22:38:06][352460887246742][1815 ms][DEBUG] check_internet: online [2025-09-08 22:38:06][352460887246742][1815 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:38:06][352460887246742][1815 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460887246742\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9051\"}'\'' -e'"" [2025-09-08 22:38:06][352460887246742][1815 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:38:06][352460887246742][1815 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460887246742\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9051\"}'\'' -e'"" [2025-09-08 22:38:11][352460887246742][6766 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f59dd367-fb6d-4f43-a250-5b5f7593d39b","id":"QR_f59dd367-fb6d-4f43-a250-5b5f7593d39b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:38:11][352460887246742][6923 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-08 22:38:11][352460887246742][6923 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-08 22:38:11][352460887246742][6923 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:38:14][352460887246742][0 ms][INFO] === Request start === [2025-09-08 22:38:14][352460887246742][1 ms][DEBUG] START check_scloud [2025-09-08 22:38:14][352460887246742][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:38:15][352460887246742][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 27524 817 24980180 230640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:38:15][352460887246742][320 ms][DEBUG] targetPkg: running [2025-09-08 22:38:15][352460887246742][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-08 22:38:15][352460887246742][320 ms][DEBUG] START check_boot_completed [2025-09-08 22:38:15][352460887246742][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:38:15][352460887246742][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 22:38:15][352460887246742][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:38:15][352460887246742][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 22:38:15][352460887246742][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 22:38:15][352460887246742][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:38:15][352460887246742][554 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5748\nsuccessfulTxPacketsPerSecond: 0.2755918584188332\nretriedTxPackets: 1205\nretriedTxPacketsPerSecond: 0.10625228276388751\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5697\nsuccessfulRxPacketsPerSecond: 0.22246571703688947\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:38:15][352460887246742][555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:38:15][352460887246742][898 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.533/242.533/242.533/0.000 ms\n [2025-09-08 22:38:15][352460887246742][898 ms][DEBUG] check_internet: online [2025-09-08 22:38:15][352460887246742][898 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:38:15][352460887246742][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460887246742\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8182\"}'\'' -e'"" [2025-09-08 22:38:15][352460887246742][898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:38:15][352460887246742][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460887246742\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8182\"}'\'' -e'"" [2025-09-08 22:38:19][352460887246742][4834 ms][DEBUG] proc_open done in 3936 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 22:38:19][352460887246742][4834 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-09-08 22:38:19][352460887246742][4834 ms][WARN] Detected error: Process with pid 27524 either refused to load frida-agent, or terminated during injectionProcess with pid 27524 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 22:38:19][352460887246742][4834 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 22:38:19][352460887246742][5084 ms][DEBUG] SU: done in 250 ms; outsystem 1031 817 12936068 206376 ep_poll 0 S system_server\n [2025-09-08 22:38:19][352460887246742][5084 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 22:38:20][352460887246742][5225 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 22:38:20][352460887246742][5225 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 22:38:20][352460887246742][5225 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 22:38:20][352460887246742][5351 ms][DEBUG] SU: done in 126 ms; out [2025-09-08 22:38:20][352460887246742][5351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 22:38:20][352460887246742][5539 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 22:38:22][352460887246742][7552 ms][DEBUG] START check_boot_completed [2025-09-08 22:38:22][352460887246742][7552 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:38:22][352460887246742][7599 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 22:38:22][352460887246742][7599 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:38:22][352460887246742][7662 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 22:38:22][352460887246742][7662 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 22:38:25][352460887246742][10676 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 22:38:25][352460887246742][10677 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460887246742\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8182\"}'\'' -e'"" [2025-09-08 22:38:29][352460887246742][14441 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97d78afa-82d6-4d23-9602-fe907390e5ae","id":"QR_97d78afa-82d6-4d23-9602-fe907390e5ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:38:29][352460887246742][14598 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=3343 [2025-09-08 22:38:29][352460887246742][14598 ms][DEBUG] END runCmdUntilRes#2 in 3921 ms [2025-09-08 22:38:29][352460887246742][14598 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:46:03][352623858498531][1 ms][INFO] === Request start === [2025-09-08 22:46:03][352623858498531][1 ms][DEBUG] START check_scloud [2025-09-08 22:46:03][352623858498531][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:46:03][352623858498531][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 29553 817 23599068 127616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:46:03][352623858498531][317 ms][DEBUG] targetPkg: running [2025-09-08 22:46:03][352623858498531][317 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 22:46:03][352623858498531][317 ms][DEBUG] START check_boot_completed [2025-09-08 22:46:03][352623858498531][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:46:03][352623858498531][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 22:46:03][352623858498531][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:46:03][352623858498531][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:46:03][352623858498531][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 22:46:03][352623858498531][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:46:03][352623858498531][520 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5946\nsuccessfulTxPacketsPerSecond: 0.020130141363917727\nretriedTxPackets: 1269\nretriedTxPacketsPerSecond: 0.020130141363917727\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5871\nsuccessfulRxPacketsPerSecond: 0.020130141363917727\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:46:03][352623858498531][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:46:05][352623858498531][1769 ms][DEBUG] SU: done in 1249 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.197/202.197/202.197/0.000 ms\n [2025-09-08 22:46:05][352623858498531][1769 ms][DEBUG] check_internet: online [2025-09-08 22:46:05][352623858498531][1769 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:46:05][352623858498531][1769 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623858498531\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7598\"}'\'' -e'"" [2025-09-08 22:46:05][352623858498531][1770 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:46:05][352623858498531][1770 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623858498531\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7598\"}'\'' -e'"" [2025-09-08 22:46:09][352623858498531][5659 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7df0e00-f5fc-4764-86bf-5b9fee286a6c","id":"QR_b7df0e00-f5fc-4764-86bf-5b9fee286a6c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:46:09][352623858498531][5815 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-09-08 22:46:09][352623858498531][5815 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-09-08 22:46:09][352623858498531][5815 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:47:04][352467929847940][0 ms][INFO] === Request start === [2025-09-08 22:47:04][352467929847940][1 ms][DEBUG] START check_scloud [2025-09-08 22:47:04][352467929847940][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:47:04][352467929847940][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 29553 817 23738508 138296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:47:04][352467929847940][316 ms][DEBUG] targetPkg: running [2025-09-08 22:47:04][352467929847940][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-08 22:47:04][352467929847940][316 ms][DEBUG] START check_boot_completed [2025-09-08 22:47:04][352467929847940][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:47:05][352467929847940][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 22:47:05][352467929847940][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:47:05][352467929847940][395 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 22:47:05][352467929847940][396 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 22:47:05][352467929847940][396 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:47:05][352467929847940][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467929847940\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7023\"}'\'' -e'"" [2025-09-08 22:47:05][352467929847940][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:47:05][352467929847940][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467929847940\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7023\"}'\'' -e'"" [2025-09-08 22:47:10][352467929847940][6096 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7835c24a-60d5-4963-a2a4-f45521df991b","id":"QR_7835c24a-60d5-4963-a2a4-f45521df991b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:47:10][352467929847940][6252 ms][DEBUG] proc_open done in 5856 ms; code=255; res.len=3343 [2025-09-08 22:47:10][352467929847940][6252 ms][DEBUG] END runCmdUntilRes#1 in 5856 ms [2025-09-08 22:47:10][352467929847940][6252 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:49:04][353628422676362][1 ms][INFO] === Request start === [2025-09-08 22:49:04][353628422676362][1 ms][DEBUG] START check_scloud [2025-09-08 22:49:04][353628422676362][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:49:04][353628422676362][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 29553 817 23875120 149432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:49:04][353628422676362][316 ms][DEBUG] targetPkg: running [2025-09-08 22:49:04][353628422676362][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 22:49:04][353628422676362][316 ms][DEBUG] START check_boot_completed [2025-09-08 22:49:04][353628422676362][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:49:04][353628422676362][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 22:49:04][353628422676362][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:49:04][353628422676362][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 22:49:04][353628422676362][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 22:49:04][353628422676362][426 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:49:04][353628422676362][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628422676362\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1289\"}'\'' -e'"" [2025-09-08 22:49:04][353628422676362][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:49:04][353628422676362][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628422676362\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1289\"}'\'' -e'"" [2025-09-08 22:49:09][353628422676362][5018 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9df9974f-3037-4915-bfb4-b2992ecdfb84","id":"QR_9df9974f-3037-4915-bfb4-b2992ecdfb84","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:49:09][353628422676362][5174 ms][DEBUG] proc_open done in 4748 ms; code=255; res.len=3343 [2025-09-08 22:49:09][353628422676362][5174 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-09-08 22:49:09][353628422676362][5174 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:49:11][353628422676362][0 ms][INFO] === Request start === [2025-09-08 22:49:11][353628422676362][1 ms][DEBUG] START check_scloud [2025-09-08 22:49:11][353628422676362][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:49:11][353628422676362][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 29553 817 24010872 161048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:49:11][353628422676362][297 ms][DEBUG] targetPkg: running [2025-09-08 22:49:11][353628422676362][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-08 22:49:11][353628422676362][297 ms][DEBUG] START check_boot_completed [2025-09-08 22:49:11][353628422676362][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:49:11][353628422676362][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 22:49:11][353628422676362][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:49:12][353628422676362][406 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 22:49:12][353628422676362][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 22:49:12][353628422676362][406 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:49:12][353628422676362][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628422676362\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9594\"}'\'' -e'"" [2025-09-08 22:49:12][353628422676362][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:49:12][353628422676362][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628422676362\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9594\"}'\'' -e'"" [2025-09-08 22:49:17][353628422676362][5592 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_258860f0-a2ab-449b-9d80-ac4562008619","id":"QR_258860f0-a2ab-449b-9d80-ac4562008619","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:49:17][353628422676362][5749 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-09-08 22:49:17][353628422676362][5749 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-09-08 22:49:17][353628422676362][5749 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:51:03][353607433212391][0 ms][INFO] === Request start === [2025-09-08 22:51:03][353607433212391][1 ms][DEBUG] START check_scloud [2025-09-08 22:51:03][353607433212391][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:51:03][353607433212391][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 29553 817 24124664 171852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:51:03][353607433212391][325 ms][DEBUG] targetPkg: running [2025-09-08 22:51:03][353607433212391][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-08 22:51:03][353607433212391][325 ms][DEBUG] START check_boot_completed [2025-09-08 22:51:03][353607433212391][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:51:03][353607433212391][356 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 22:51:03][353607433212391][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:51:04][353607433212391][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:51:04][353607433212391][403 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 22:51:04][353607433212391][403 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:51:04][353607433212391][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607433212391\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5362\"}'\'' -e'"" [2025-09-08 22:51:04][353607433212391][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:51:04][353607433212391][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607433212391\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5362\"}'\'' -e'"" [2025-09-08 22:51:08][353607433212391][4886 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce58da60-0a70-4dc5-a257-bee946f56c45","id":"QR_ce58da60-0a70-4dc5-a257-bee946f56c45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:51:08][353607433212391][5042 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-08 22:51:08][353607433212391][5042 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-08 22:51:08][353607433212391][5042 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:51:11][353607433212391][1 ms][INFO] === Request start === [2025-09-08 22:51:11][353607433212391][1 ms][DEBUG] START check_scloud [2025-09-08 22:51:11][353607433212391][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:51:11][353607433212391][253 ms][DEBUG] SU: done in 251 ms; outu0_a118 29553 817 24260992 183532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:51:11][353607433212391][253 ms][DEBUG] targetPkg: running [2025-09-08 22:51:11][353607433212391][253 ms][DEBUG] END check_scloud in 251 ms [2025-09-08 22:51:11][353607433212391][253 ms][DEBUG] START check_boot_completed [2025-09-08 22:51:11][353607433212391][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:51:11][353607433212391][284 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 22:51:11][353607433212391][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:51:11][353607433212391][331 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:51:11][353607433212391][331 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 22:51:11][353607433212391][331 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:51:11][353607433212391][331 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607433212391\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9628\"}'\'' -e'"" [2025-09-08 22:51:11][353607433212391][331 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:51:11][353607433212391][331 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607433212391\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9628\"}'\'' -e'"" [2025-09-08 22:51:16][353607433212391][5283 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7fa17f7-5b7e-4e00-94bc-a76f1a488579","id":"QR_b7fa17f7-5b7e-4e00-94bc-a76f1a488579","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:51:16][353607433212391][5439 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-08 22:51:16][353607433212391][5439 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-08 22:51:16][353607433212391][5439 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:57:04][352042191034996][1 ms][INFO] === Request start === [2025-09-08 22:57:04][352042191034996][1 ms][DEBUG] START check_scloud [2025-09-08 22:57:04][352042191034996][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:57:04][352042191034996][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 29553 817 24354304 195140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:57:04][352042191034996][307 ms][DEBUG] targetPkg: running [2025-09-08 22:57:04][352042191034996][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-08 22:57:04][352042191034996][307 ms][DEBUG] START check_boot_completed [2025-09-08 22:57:04][352042191034996][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:57:04][352042191034996][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 22:57:04][352042191034996][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:57:05][352042191034996][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:57:05][352042191034996][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 22:57:05][352042191034996][401 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:57:05][352042191034996][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042191034996\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9406\"}'\'' -e'"" [2025-09-08 22:57:05][352042191034996][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:57:05][352042191034996][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042191034996\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9406\"}'\'' -e'"" [2025-09-08 22:57:10][352042191034996][5837 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2b86763-c0af-4a05-912b-bcb81c58e638","id":"QR_b2b86763-c0af-4a05-912b-bcb81c58e638","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:57:10][352042191034996][5993 ms][DEBUG] proc_open done in 5592 ms; code=255; res.len=3343 [2025-09-08 22:57:10][352042191034996][5993 ms][DEBUG] END runCmdUntilRes#1 in 5592 ms [2025-09-08 22:57:10][352042191034996][5993 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:57:14][352042191034996][0 ms][INFO] === Request start === [2025-09-08 22:57:14][352042191034996][1 ms][DEBUG] START check_scloud [2025-09-08 22:57:14][352042191034996][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:57:14][352042191034996][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 29553 817 24507016 206920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:57:14][352042191034996][290 ms][DEBUG] targetPkg: running [2025-09-08 22:57:14][352042191034996][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-08 22:57:14][352042191034996][290 ms][DEBUG] START check_boot_completed [2025-09-08 22:57:14][352042191034996][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:57:14][352042191034996][337 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 22:57:14][352042191034996][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:57:14][352042191034996][399 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 22:57:14][352042191034996][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 22:57:14][352042191034996][399 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:57:14][352042191034996][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042191034996\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9965\"}'\'' -e'"" [2025-09-08 22:57:14][352042191034996][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:57:14][352042191034996][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042191034996\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9965\"}'\'' -e'"" [2025-09-08 22:57:18][352042191034996][4445 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_108c4858-9bed-4a49-b776-74741c73b031","id":"QR_108c4858-9bed-4a49-b776-74741c73b031","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:57:18][352042191034996][4601 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-09-08 22:57:18][352042191034996][4601 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-08 22:57:18][352042191034996][4601 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:58:04][359250140578103][0 ms][INFO] === Request start === [2025-09-08 22:58:04][359250140578103][1 ms][DEBUG] START check_scloud [2025-09-08 22:58:04][359250140578103][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:58:05][359250140578103][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 29553 817 24625864 217796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:58:05][359250140578103][314 ms][DEBUG] targetPkg: running [2025-09-08 22:58:05][359250140578103][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 22:58:05][359250140578103][314 ms][DEBUG] START check_boot_completed [2025-09-08 22:58:05][359250140578103][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:58:05][359250140578103][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 22:58:05][359250140578103][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:58:05][359250140578103][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:58:05][359250140578103][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 22:58:05][359250140578103][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:58:05][359250140578103][532 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6143\nsuccessfulTxPacketsPerSecond: 0.22207711710756156\nretriedTxPackets: 1337\nretriedTxPacketsPerSecond: 0.08617917977308359\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6039\nsuccessfulRxPacketsPerSecond: 0.17898752722101977\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:58:05][359250140578103][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:58:06][359250140578103][1751 ms][DEBUG] SU: done in 1219 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.440/203.440/203.440/0.000 ms\n [2025-09-08 22:58:06][359250140578103][1751 ms][DEBUG] check_internet: online [2025-09-08 22:58:06][359250140578103][1751 ms][DEBUG] rawBody.length=1160 [2025-09-08 22:58:06][359250140578103][1751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359250140578103\",\"model\":\"SM-F926U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6793\"}'\'' -e'"" [2025-09-08 22:58:06][359250140578103][1751 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:58:06][359250140578103][1751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359250140578103\",\"model\":\"SM-F926U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6793\"}'\'' -e'"" [2025-09-08 22:58:10][359250140578103][5765 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-08 22:58:10][359250140578103][5921 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=101 [2025-09-08 22:58:10][359250140578103][5921 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-09-08 22:58:10][359250140578103][5921 ms][INFO] SUCCESS response from frida (len=101) [2025-09-08 22:58:11][][0 ms][INFO] === Request start === [2025-09-08 22:58:11][][1 ms][DEBUG] START check_scloud [2025-09-08 22:58:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:58:11][][252 ms][DEBUG] SU: done in 252 ms; outu0_a118 29553 817 24801104 229576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:58:11][][252 ms][DEBUG] targetPkg: running [2025-09-08 22:58:11][][252 ms][DEBUG] END check_scloud in 252 ms [2025-09-08 22:58:11][][253 ms][DEBUG] START check_boot_completed [2025-09-08 22:58:11][][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:58:11][][299 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 22:58:11][][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:58:11][][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:58:11][][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 22:58:11][][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:58:11][][455 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6143\nsuccessfulTxPacketsPerSecond: 0.22207711710756156\nretriedTxPackets: 1337\nretriedTxPacketsPerSecond: 0.08617917977308359\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6039\nsuccessfulRxPacketsPerSecond: 0.17898752722101977\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:58:11][][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:58:11][][737 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.272/163.272/163.272/0.000 ms\n [2025-09-08 22:58:11][][737 ms][DEBUG] check_internet: online [2025-09-08 22:58:11][][737 ms][DEBUG] rawBody.length=1141 [2025-09-08 22:58:11][][737 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F926U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCR80JBAEN\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7458\"}'\'' -e'"" [2025-09-08 22:58:11][][737 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:58:11][][737 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F926U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCR80JBAEN\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7458\"}'\'' -e'"" [2025-09-08 22:58:15][][4517 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-08 22:58:15][][4673 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=101 [2025-09-08 22:58:15][][4673 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-09-08 22:58:15][][4673 ms][INFO] SUCCESS response from frida (len=101) [2025-09-08 22:58:16][359250140578103][0 ms][INFO] === Request start === [2025-09-08 22:58:16][359250140578103][1 ms][DEBUG] START check_scloud [2025-09-08 22:58:16][359250140578103][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:58:16][359250140578103][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 29553 817 24945756 240216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:58:16][359250140578103][311 ms][DEBUG] targetPkg: running [2025-09-08 22:58:16][359250140578103][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 22:58:16][359250140578103][311 ms][DEBUG] START check_boot_completed [2025-09-08 22:58:16][359250140578103][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:58:16][359250140578103][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 22:58:16][359250140578103][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:58:16][359250140578103][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 22:58:16][359250140578103][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 22:58:16][359250140578103][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:58:16][359250140578103][514 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6143\nsuccessfulTxPacketsPerSecond: 0.22207711710756156\nretriedTxPackets: 1337\nretriedTxPacketsPerSecond: 0.08617917977308359\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6039\nsuccessfulRxPacketsPerSecond: 0.17898752722101977\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:58:16][359250140578103][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:58:17][359250140578103][780 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.454/164.454/164.454/0.000 ms\n [2025-09-08 22:58:17][359250140578103][780 ms][DEBUG] check_internet: online [2025-09-08 22:58:17][359250140578103][780 ms][DEBUG] rawBody.length=1150 [2025-09-08 22:58:17][359250140578103][780 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359250140578103\",\"model\":\"SM-F926U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4792\"}'\'' -e'"" [2025-09-08 22:58:17][359250140578103][780 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:58:17][359250140578103][780 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359250140578103\",\"model\":\"SM-F926U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4792\"}'\'' -e'"" [2025-09-08 22:58:21][359250140578103][4685 ms][DEBUG] proc_open done in 3905 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 22:58:21][359250140578103][4685 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-08 22:58:21][359250140578103][4685 ms][WARN] Detected error: Process with pid 29553 either refused to load frida-agent, or terminated during injectionProcess with pid 29553 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 22:58:21][359250140578103][4685 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 22:58:21][359250140578103][4966 ms][DEBUG] SU: done in 281 ms; outsystem 1031 817 12936068 190448 ep_poll 0 S system_server\n [2025-09-08 22:58:21][359250140578103][4966 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 22:58:21][359250140578103][5107 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 22:58:21][359250140578103][5107 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 22:58:21][359250140578103][5107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 22:58:21][359250140578103][5232 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 22:58:21][359250140578103][5232 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 22:58:21][359250140578103][5419 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 22:58:23][359250140578103][7434 ms][DEBUG] START check_boot_completed [2025-09-08 22:58:23][359250140578103][7434 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:58:23][359250140578103][7481 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 22:58:23][359250140578103][7481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:58:23][359250140578103][7543 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 22:58:23][359250140578103][7543 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 22:58:26][359250140578103][10558 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 22:58:26][359250140578103][10558 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359250140578103\",\"model\":\"SM-F926U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4792\"}'\'' -e'"" [2025-09-08 22:58:30][359250140578103][14308 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9a6b1cb-f38f-4225-b306-7a72c55da021","id":"QR_b9a6b1cb-f38f-4225-b306-7a72c55da021","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:58:30][359250140578103][14464 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-09-08 22:58:30][359250140578103][14464 ms][DEBUG] END runCmdUntilRes#2 in 3906 ms [2025-09-08 22:58:30][359250140578103][14464 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:58:34][355835401713409][0 ms][INFO] === Request start === [2025-09-08 22:58:34][355835401713409][1 ms][DEBUG] START check_scloud [2025-09-08 22:58:34][355835401713409][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:58:34][355835401713409][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 31392 817 23722208 123844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:58:34][355835401713409][257 ms][DEBUG] targetPkg: running [2025-09-08 22:58:34][355835401713409][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-08 22:58:34][355835401713409][257 ms][DEBUG] START check_boot_completed [2025-09-08 22:58:34][355835401713409][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:58:34][355835401713409][288 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 22:58:34][355835401713409][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:58:34][355835401713409][335 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:58:34][355835401713409][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 22:58:34][355835401713409][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:58:34][355835401713409][445 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6143\nsuccessfulTxPacketsPerSecond: 0.22207711710756156\nretriedTxPackets: 1337\nretriedTxPacketsPerSecond: 0.08617917977308359\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6039\nsuccessfulRxPacketsPerSecond: 0.17898752722101977\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:58:34][355835401713409][445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:58:34][355835401713409][835 ms][DEBUG] SU: done in 389 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=273 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 273.200/273.200/273.200/0.000 ms\n [2025-09-08 22:58:34][355835401713409][835 ms][DEBUG] check_internet: online [2025-09-08 22:58:34][355835401713409][835 ms][DEBUG] rawBody.length=1159 [2025-09-08 22:58:34][355835401713409][835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355835401713409\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6551\"}'\'' -e'"" [2025-09-08 22:58:34][355835401713409][835 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:58:34][355835401713409][835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355835401713409\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6551\"}'\'' -e'"" [2025-09-08 22:58:39][355835401713409][5662 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35fd9327-9308-4d16-90fb-86e8d4c9df83","id":"QR_35fd9327-9308-4d16-90fb-86e8d4c9df83","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:58:39][355835401713409][5818 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3343 [2025-09-08 22:58:39][355835401713409][5818 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-09-08 22:58:39][355835401713409][5818 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 22:58:43][355835401713409][0 ms][INFO] === Request start === [2025-09-08 22:58:43][355835401713409][1 ms][DEBUG] START check_scloud [2025-09-08 22:58:43][355835401713409][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 22:58:43][355835401713409][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 31392 817 23865908 137040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 22:58:43][355835401713409][254 ms][DEBUG] targetPkg: running [2025-09-08 22:58:43][355835401713409][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-08 22:58:43][355835401713409][254 ms][DEBUG] START check_boot_completed [2025-09-08 22:58:43][355835401713409][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 22:58:43][355835401713409][285 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 22:58:43][355835401713409][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 22:58:43][355835401713409][332 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 22:58:43][355835401713409][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 22:58:43][355835401713409][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 22:58:43][355835401713409][441 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6143\nsuccessfulTxPacketsPerSecond: 0.22207711710756156\nretriedTxPackets: 1337\nretriedTxPacketsPerSecond: 0.08617917977308359\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6039\nsuccessfulRxPacketsPerSecond: 0.17898752722101977\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 22:58:43][355835401713409][441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 22:58:44][355835401713409][722 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=185 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 185.943/185.943/185.943/0.000 ms\n [2025-09-08 22:58:44][355835401713409][722 ms][DEBUG] check_internet: online [2025-09-08 22:58:44][355835401713409][722 ms][DEBUG] rawBody.length=1149 [2025-09-08 22:58:44][355835401713409][722 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355835401713409\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1635\"}'\'' -e'"" [2025-09-08 22:58:44][355835401713409][722 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 22:58:44][355835401713409][722 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355835401713409\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1635\"}'\'' -e'"" [2025-09-08 22:58:47][355835401713409][4018 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_76188f7e-4ced-424b-8270-a97077a19a3a","id":"QR_76188f7e-4ced-424b-8270-a97077a19a3a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 22:58:47][355835401713409][4175 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-08 22:58:47][355835401713409][4175 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-08 22:58:47][355835401713409][4175 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:09:05][351924871736480][1 ms][INFO] === Request start === [2025-09-08 23:09:05][351924871736480][1 ms][DEBUG] START check_scloud [2025-09-08 23:09:05][351924871736480][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:09:05][351924871736480][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 31392 817 23865124 149076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:09:05][351924871736480][309 ms][DEBUG] targetPkg: running [2025-09-08 23:09:05][351924871736480][309 ms][DEBUG] END check_scloud in 307 ms [2025-09-08 23:09:05][351924871736480][309 ms][DEBUG] START check_boot_completed [2025-09-08 23:09:05][351924871736480][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:09:05][351924871736480][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 23:09:05][351924871736480][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:09:05][351924871736480][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 23:09:05][351924871736480][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 23:09:05][351924871736480][402 ms][DEBUG] rawBody.length=1160 [2025-09-08 23:09:05][351924871736480][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351924871736480\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6417\"}'\'' -e'"" [2025-09-08 23:09:05][351924871736480][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:09:05][351924871736480][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351924871736480\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6417\"}'\'' -e'"" [2025-09-08 23:09:11][351924871736480][6401 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08e286a7-d377-4ea9-85b6-2f46fc64ca26","id":"QR_08e286a7-d377-4ea9-85b6-2f46fc64ca26","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:09:12][351924871736480][6557 ms][DEBUG] proc_open done in 6155 ms; code=255; res.len=3343 [2025-09-08 23:09:12][351924871736480][6557 ms][DEBUG] END runCmdUntilRes#1 in 6155 ms [2025-09-08 23:09:12][351924871736480][6557 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:09:15][351924871736480][0 ms][INFO] === Request start === [2025-09-08 23:09:15][351924871736480][0 ms][DEBUG] START check_scloud [2025-09-08 23:09:15][351924871736480][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:09:15][351924871736480][274 ms][DEBUG] SU: done in 274 ms; outu0_a118 31392 817 24035448 160940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:09:15][351924871736480][274 ms][DEBUG] targetPkg: running [2025-09-08 23:09:15][351924871736480][274 ms][DEBUG] END check_scloud in 274 ms [2025-09-08 23:09:15][351924871736480][274 ms][DEBUG] START check_boot_completed [2025-09-08 23:09:15][351924871736480][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:09:15][351924871736480][321 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 23:09:15][351924871736480][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:09:15][351924871736480][430 ms][DEBUG] SU: done in 109 ms; out [2025-09-08 23:09:15][351924871736480][430 ms][DEBUG] END check_boot_completed in 156 ms [2025-09-08 23:09:15][351924871736480][430 ms][DEBUG] rawBody.length=1150 [2025-09-08 23:09:15][351924871736480][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351924871736480\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2335\"}'\'' -e'"" [2025-09-08 23:09:15][351924871736480][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:09:15][351924871736480][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351924871736480\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2335\"}'\'' -e'"" [2025-09-08 23:09:19][351924871736480][4195 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4822de8-1ae7-4e6a-afde-620fae77f052","id":"QR_d4822de8-1ae7-4e6a-afde-620fae77f052","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:09:19][351924871736480][4351 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-08 23:09:19][351924871736480][4351 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-09-08 23:09:19][351924871736480][4351 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:12:04][354685615915725][1 ms][INFO] === Request start === [2025-09-08 23:12:04][354685615915725][1 ms][DEBUG] START check_scloud [2025-09-08 23:12:04][354685615915725][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:12:04][354685615915725][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 31392 817 24145336 171964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:12:04][354685615915725][311 ms][DEBUG] targetPkg: running [2025-09-08 23:12:04][354685615915725][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-08 23:12:04][354685615915725][311 ms][DEBUG] START check_boot_completed [2025-09-08 23:12:04][354685615915725][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:12:04][354685615915725][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 23:12:04][354685615915725][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:12:05][354685615915725][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 23:12:05][354685615915725][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 23:12:05][354685615915725][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 23:12:05][354685615915725][500 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6495\nsuccessfulTxPacketsPerSecond: 0.2987264296549046\nretriedTxPackets: 1445\nretriedTxPacketsPerSecond: 0.0697028335861444\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6348\nsuccessfulRxPacketsPerSecond: 0.29208806455146225\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 23:12:05][354685615915725][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 23:12:06][354685615915725][1780 ms][DEBUG] SU: done in 1279 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.036/204.036/204.036/0.000 ms\n [2025-09-08 23:12:06][354685615915725][1780 ms][DEBUG] check_internet: online [2025-09-08 23:12:06][354685615915725][1780 ms][DEBUG] rawBody.length=1160 [2025-09-08 23:12:06][354685615915725][1780 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354685615915725\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7906\"}'\'' -e'"" [2025-09-08 23:12:06][354685615915725][1780 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:12:06][354685615915725][1780 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354685615915725\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7906\"}'\'' -e'"" [2025-09-08 23:12:11][354685615915725][7028 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b714b761-3f6d-4b3c-9a88-08a71762a8ca","id":"QR_b714b761-3f6d-4b3c-9a88-08a71762a8ca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:12:11][354685615915725][7184 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-08 23:12:11][354685615915725][7184 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-08 23:12:11][354685615915725][7184 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:17:04][355901955196431][1 ms][INFO] === Request start === [2025-09-08 23:17:04][355901955196431][1 ms][DEBUG] START check_scloud [2025-09-08 23:17:04][355901955196431][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:17:04][355901955196431][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 31392 817 24308316 184072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:17:04][355901955196431][254 ms][DEBUG] targetPkg: running [2025-09-08 23:17:04][355901955196431][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-08 23:17:04][355901955196431][254 ms][DEBUG] START check_boot_completed [2025-09-08 23:17:04][355901955196431][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:17:04][355901955196431][284 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 23:17:04][355901955196431][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:17:04][355901955196431][331 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 23:17:04][355901955196431][331 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 23:17:04][355901955196431][331 ms][DEBUG] rawBody.length=1160 [2025-09-08 23:17:04][355901955196431][331 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355901955196431\",\"model\":\"SM-S721U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4113\"}'\'' -e'"" [2025-09-08 23:17:04][355901955196431][332 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:17:04][355901955196431][332 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355901955196431\",\"model\":\"SM-S721U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4113\"}'\'' -e'"" [2025-09-08 23:17:10][355901955196431][6330 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f8fedc8-1c0d-45a4-8ae5-7901b2c8d655","id":"QR_3f8fedc8-1c0d-45a4-8ae5-7901b2c8d655","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:17:10][355901955196431][6486 ms][DEBUG] proc_open done in 6155 ms; code=255; res.len=3343 [2025-09-08 23:17:10][355901955196431][6486 ms][DEBUG] END runCmdUntilRes#1 in 6155 ms [2025-09-08 23:17:10][355901955196431][6487 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:17:14][355901955196431][0 ms][INFO] === Request start === [2025-09-08 23:17:14][355901955196431][0 ms][DEBUG] START check_scloud [2025-09-08 23:17:14][355901955196431][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:17:14][355901955196431][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 31392 817 24467172 194684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:17:14][355901955196431][324 ms][DEBUG] targetPkg: running [2025-09-08 23:17:14][355901955196431][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-08 23:17:14][355901955196431][324 ms][DEBUG] START check_boot_completed [2025-09-08 23:17:14][355901955196431][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:17:14][355901955196431][370 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 23:17:14][355901955196431][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:17:14][355901955196431][433 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 23:17:14][355901955196431][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 23:17:14][355901955196431][433 ms][DEBUG] rawBody.length=1150 [2025-09-08 23:17:14][355901955196431][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355901955196431\",\"model\":\"SM-S721U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2638\"}'\'' -e'"" [2025-09-08 23:17:14][355901955196431][433 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:17:14][355901955196431][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355901955196431\",\"model\":\"SM-S721U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2638\"}'\'' -e'"" [2025-09-08 23:17:18][355901955196431][4463 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88ce70cf-5366-4b41-955b-89c7d860a891","id":"QR_88ce70cf-5366-4b41-955b-89c7d860a891","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:17:18][355901955196431][4619 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-08 23:17:18][355901955196431][4619 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-08 23:17:18][355901955196431][4619 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:21:03][350784346907988][1 ms][INFO] === Request start === [2025-09-08 23:21:03][350784346907988][1 ms][DEBUG] START check_scloud [2025-09-08 23:21:03][350784346907988][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:21:03][350784346907988][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 31392 817 24562596 206596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:21:03][350784346907988][264 ms][DEBUG] targetPkg: running [2025-09-08 23:21:03][350784346907988][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-08 23:21:03][350784346907988][264 ms][DEBUG] START check_boot_completed [2025-09-08 23:21:03][350784346907988][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:21:03][350784346907988][295 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 23:21:03][350784346907988][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:21:03][350784346907988][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 23:21:03][350784346907988][342 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 23:21:03][350784346907988][342 ms][DEBUG] rawBody.length=1150 [2025-09-08 23:21:03][350784346907988][342 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350784346907988\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3199\"}'\'' -e'"" [2025-09-08 23:21:03][350784346907988][342 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:21:03][350784346907988][342 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350784346907988\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3199\"}'\'' -e'"" [2025-09-08 23:21:07][350784346907988][4685 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40b94f46-ae1c-4fa7-81e2-21acdb7ac6ce","id":"QR_40b94f46-ae1c-4fa7-81e2-21acdb7ac6ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:21:08][350784346907988][4841 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-09-08 23:21:08][350784346907988][4841 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-09-08 23:21:08][350784346907988][4841 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:21:10][350784346907988][0 ms][INFO] === Request start === [2025-09-08 23:21:10][350784346907988][1 ms][DEBUG] START check_scloud [2025-09-08 23:21:10][350784346907988][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:21:10][350784346907988][320 ms][DEBUG] SU: done in 320 ms; outu0_a118 31392 817 24738860 217284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:21:10][350784346907988][321 ms][DEBUG] targetPkg: running [2025-09-08 23:21:10][350784346907988][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-08 23:21:10][350784346907988][321 ms][DEBUG] START check_boot_completed [2025-09-08 23:21:10][350784346907988][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:21:10][350784346907988][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 23:21:10][350784346907988][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:21:11][350784346907988][430 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 23:21:11][350784346907988][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 23:21:11][350784346907988][430 ms][DEBUG] rawBody.length=1160 [2025-09-08 23:21:11][350784346907988][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350784346907988\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9253\"}'\'' -e'"" [2025-09-08 23:21:11][350784346907988][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:21:11][350784346907988][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350784346907988\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9253\"}'\'' -e'"" [2025-09-08 23:21:16][350784346907988][5444 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10dad56d-3c42-46a9-9084-545c49bfdf60","id":"QR_10dad56d-3c42-46a9-9084-545c49bfdf60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:21:16][350784346907988][5600 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-09-08 23:21:16][350784346907988][5600 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-09-08 23:21:16][350784346907988][5600 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:26:05][352923544251074][1 ms][INFO] === Request start === [2025-09-08 23:26:05][352923544251074][1 ms][DEBUG] START check_scloud [2025-09-08 23:26:05][352923544251074][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:26:05][352923544251074][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 31392 817 24853860 229544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:26:05][352923544251074][312 ms][DEBUG] targetPkg: running [2025-09-08 23:26:05][352923544251074][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-08 23:26:05][352923544251074][312 ms][DEBUG] START check_boot_completed [2025-09-08 23:26:05][352923544251074][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:26:05][352923544251074][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 23:26:05][352923544251074][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:26:05][352923544251074][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 23:26:05][352923544251074][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-08 23:26:05][352923544251074][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 23:26:05][352923544251074][499 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6692\nsuccessfulTxPacketsPerSecond: 0.16968428000634111\nretriedTxPackets: 1514\nretriedTxPacketsPerSecond: 0.010234011285135411\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6518\nsuccessfulRxPacketsPerSecond: 0.023879359665315958\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 23:26:05][352923544251074][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 23:26:06][352923544251074][1827 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.722/198.722/198.722/0.000 ms\n [2025-09-08 23:26:06][352923544251074][1827 ms][DEBUG] check_internet: online [2025-09-08 23:26:06][352923544251074][1827 ms][DEBUG] rawBody.length=1160 [2025-09-08 23:26:06][352923544251074][1828 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923544251074\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4897\"}'\'' -e'"" [2025-09-08 23:26:06][352923544251074][1828 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:26:06][352923544251074][1828 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923544251074\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4897\"}'\'' -e'"" [2025-09-08 23:26:12][352923544251074][7170 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1764926a-3538-40b8-9b44-cd35ecf56bc4","id":"QR_1764926a-3538-40b8-9b44-cd35ecf56bc4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:26:12][352923544251074][7326 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-09-08 23:26:12][352923544251074][7326 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-09-08 23:26:12][352923544251074][7326 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:26:18][352749381456116][0 ms][INFO] === Request start === [2025-09-08 23:26:18][352749381456116][1 ms][DEBUG] START check_scloud [2025-09-08 23:26:18][352749381456116][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:26:18][352749381456116][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 31392 817 24990316 240276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:26:18][352749381456116][314 ms][DEBUG] targetPkg: running [2025-09-08 23:26:18][352749381456116][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-08 23:26:18][352749381456116][314 ms][DEBUG] START check_boot_completed [2025-09-08 23:26:18][352749381456116][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:26:18][352749381456116][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 23:26:18][352749381456116][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:26:18][352749381456116][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 23:26:18][352749381456116][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-08 23:26:18][352749381456116][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 23:26:18][352749381456116][517 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=6028709 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6692\nsuccessfulTxPacketsPerSecond: 0.16968428000634111\nretriedTxPackets: 1514\nretriedTxPacketsPerSecond: 0.010234011285135411\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6518\nsuccessfulRxPacketsPerSecond: 0.023879359665315958\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 23:26:18][352749381456116][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 23:26:18][352749381456116][845 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.736/192.736/192.736/0.000 ms\n [2025-09-08 23:26:18][352749381456116][845 ms][DEBUG] check_internet: online [2025-09-08 23:26:18][352749381456116][845 ms][DEBUG] rawBody.length=1160 [2025-09-08 23:26:18][352749381456116][845 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749381456116\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1074\"}'\'' -e'"" [2025-09-08 23:26:18][352749381456116][845 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:26:18][352749381456116][845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749381456116\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1074\"}'\'' -e'"" [2025-09-08 23:26:22][352749381456116][4750 ms][DEBUG] proc_open done in 3905 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-08 23:26:22][352749381456116][4750 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-08 23:26:22][352749381456116][4750 ms][WARN] Detected error: Process with pid 31392 either refused to load frida-agent, or terminated during injectionProcess with pid 31392 either refused to load frida-agent, or terminated during injection\r\n [2025-09-08 23:26:22][352749381456116][4750 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 23:26:23][352749381456116][5000 ms][DEBUG] SU: done in 250 ms; outsystem 1031 817 12936072 193884 ep_poll 0 S system_server\nsystem 1525 1 12603864 118112 ptrace_stop 0 t system_server\n [2025-09-08 23:26:23][352749381456116][5001 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 23:26:23][352749381456116][5141 ms][DEBUG] SU: done in 140 ms; out [2025-09-08 23:26:23][352749381456116][5141 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 23:26:23][352749381456116][5141 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 23:26:23][352749381456116][5266 ms][DEBUG] SU: done in 125 ms; out [2025-09-08 23:26:23][352749381456116][5266 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 23:26:23][352749381456116][5469 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 23:26:25][352749381456116][7484 ms][DEBUG] START check_boot_completed [2025-09-08 23:26:25][352749381456116][7484 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:26:25][352749381456116][7531 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 23:26:25][352749381456116][7531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:26:25][352749381456116][7578 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 23:26:25][352749381456116][7578 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 23:26:28][352749381456116][10593 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 23:26:28][352749381456116][10593 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749381456116\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1074\"}'\'' -e'"" [2025-09-08 23:26:29][352749381456116][11218 ms][DEBUG] proc_open done in 625 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-08 23:26:29][352749381456116][11218 ms][DEBUG] END runCmdUntilRes#2 in 625 ms [2025-09-08 23:26:29][352749381456116][11218 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-08 23:26:29][352749381456116][11218 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 23:26:29][352749381456116][11499 ms][DEBUG] SU: done in 281 ms; out [2025-09-08 23:27:04][352749381456116][0 ms][INFO] === Request start === [2025-09-08 23:27:04][352749381456116][1 ms][DEBUG] START check_scloud [2025-09-08 23:27:04][352749381456116][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:27:04][352749381456116][341 ms][DEBUG] SU: done in 340 ms; out [2025-09-08 23:27:04][352749381456116][341 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-08 23:27:04][352749381456116][388 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-08 23:27:04][352749381456116][388 ms][DEBUG] check_devices: device found [2025-09-08 23:27:04][352749381456116][388 ms][WARN] targetPkg: not running, restarting [2025-09-08 23:27:04][352749381456116][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 23:27:05][352749381456116][575 ms][DEBUG] SU: done in 187 ms; out [2025-09-08 23:27:05][352749381456116][575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 23:27:05][352749381456116][778 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 23:27:07][352749381456116][2793 ms][DEBUG] END check_scloud in 2793 ms [2025-09-08 23:27:07][352749381456116][2793 ms][DEBUG] START check_boot_completed [2025-09-08 23:27:07][352749381456116][2793 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:27:07][352749381456116][2840 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 23:27:07][352749381456116][2840 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:27:07][352749381456116][2903 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 23:27:07][352749381456116][2903 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-08 23:27:07][352749381456116][2903 ms][DEBUG] rawBody.length=1160 [2025-09-08 23:27:07][352749381456116][2903 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749381456116\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2420\"}'\'' -e'"" [2025-09-08 23:27:07][352749381456116][2903 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:27:07][352749381456116][2903 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749381456116\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2420\"}'\'' -e'"" [2025-09-08 23:27:12][352749381456116][8042 ms][DEBUG] proc_open done in 5139 ms (timeout); code=4; out.len=0 err.len=19 [2025-09-08 23:27:12][352749381456116][8042 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-09-08 23:27:12][352749381456116][8042 ms][WARN] Detected error: Process not foundProcess not found\r\n [2025-09-08 23:27:12][352749381456116][8042 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-08 23:27:12][352749381456116][8433 ms][DEBUG] SU: done in 391 ms; outsystem 2152 1773 13315396 638508 futex_wait_queue_me 0 S system_server\n [2025-09-08 23:27:12][352749381456116][8433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-08 23:27:13][352749381456116][8683 ms][DEBUG] SU: done in 249 ms; out [2025-09-08 23:27:13][352749381456116][8683 ms][WARN] targetPkg: not running, restarting 2 [2025-09-08 23:27:13][352749381456116][8683 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-08 23:27:13][352749381456116][8839 ms][DEBUG] SU: done in 156 ms; out [2025-09-08 23:27:13][352749381456116][8839 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-08 23:27:13][352749381456116][9167 ms][DEBUG] SU: done in 328 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-08 23:27:15][352749381456116][11182 ms][DEBUG] START check_boot_completed [2025-09-08 23:27:15][352749381456116][11182 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:27:15][352749381456116][11229 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 23:27:15][352749381456116][11229 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:27:15][352749381456116][11338 ms][DEBUG] SU: done in 109 ms; out [2025-09-08 23:27:15][352749381456116][11338 ms][DEBUG] END check_boot_completed in 157 ms [2025-09-08 23:27:18][352749381456116][14353 ms][DEBUG] START runCmdUntilRes#2 [2025-09-08 23:27:18][352749381456116][14353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749381456116\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2420\"}'\'' -e'"" [2025-09-08 23:27:26][352749381456116][22070 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_604818c8-d011-4483-8091-7d3304210952","id":"QR_604818c8-d011-4483-8091-7d3304210952","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:27:26][352749381456116][22226 ms][DEBUG] proc_open done in 7873 ms; code=255; res.len=3343 [2025-09-08 23:27:26][352749381456116][22226 ms][DEBUG] END runCmdUntilRes#2 in 7873 ms [2025-09-08 23:27:26][352749381456116][22226 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:33:04][350455581319870][0 ms][INFO] === Request start === [2025-09-08 23:33:04][350455581319870][0 ms][DEBUG] START check_scloud [2025-09-08 23:33:04][350455581319870][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:33:04][350455581319870][356 ms][DEBUG] SU: done in 356 ms; outu0_a118 5496 1773 23772076 75080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:33:04][350455581319870][356 ms][DEBUG] targetPkg: running [2025-09-08 23:33:04][350455581319870][356 ms][DEBUG] END check_scloud in 356 ms [2025-09-08 23:33:04][350455581319870][356 ms][DEBUG] START check_boot_completed [2025-09-08 23:33:04][350455581319870][356 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:33:04][350455581319870][402 ms][DEBUG] ADB: done in 45 ms; out [2025-09-08 23:33:04][350455581319870][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:33:05][350455581319870][464 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 23:33:05][350455581319870][464 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-08 23:33:05][350455581319870][464 ms][DEBUG] rawBody.length=1160 [2025-09-08 23:33:05][350455581319870][464 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581319870\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2475\"}'\'' -e'"" [2025-09-08 23:33:05][350455581319870][464 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:33:05][350455581319870][464 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581319870\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2475\"}'\'' -e'"" [2025-09-08 23:33:11][350455581319870][6697 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2f00d0b-cb6f-461c-b156-5f9dc3fb69ce","id":"QR_f2f00d0b-cb6f-461c-b156-5f9dc3fb69ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:33:11][350455581319870][6853 ms][DEBUG] proc_open done in 6389 ms; code=255; res.len=3343 [2025-09-08 23:33:11][350455581319870][6853 ms][DEBUG] END runCmdUntilRes#1 in 6389 ms [2025-09-08 23:33:11][350455581319870][6853 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:33:14][350455581319870][0 ms][INFO] === Request start === [2025-09-08 23:33:14][350455581319870][1 ms][DEBUG] START check_scloud [2025-09-08 23:33:14][350455581319870][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:33:15][350455581319870][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 5496 1773 23918644 88832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:33:15][350455581319870][316 ms][DEBUG] targetPkg: running [2025-09-08 23:33:15][350455581319870][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-08 23:33:15][350455581319870][316 ms][DEBUG] START check_boot_completed [2025-09-08 23:33:15][350455581319870][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:33:15][350455581319870][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 23:33:15][350455581319870][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:33:15][350455581319870][441 ms][DEBUG] SU: done in 78 ms; out [2025-09-08 23:33:15][350455581319870][441 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 23:33:15][350455581319870][441 ms][DEBUG] rawBody.length=1150 [2025-09-08 23:33:15][350455581319870][441 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581319870\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8280\"}'\'' -e'"" [2025-09-08 23:33:15][350455581319870][441 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:33:15][350455581319870][441 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581319870\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8280\"}'\'' -e'"" [2025-09-08 23:33:19][350455581319870][4221 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55ca058e-9134-4235-af66-f19ad67a6844","id":"QR_55ca058e-9134-4235-af66-f19ad67a6844","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:33:19][350455581319870][4377 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-09-08 23:33:19][350455581319870][4377 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-09-08 23:33:19][350455581319870][4377 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:47:05][351334332015047][1 ms][INFO] === Request start === [2025-09-08 23:47:05][351334332015047][1 ms][DEBUG] START check_scloud [2025-09-08 23:47:05][351334332015047][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:47:05][351334332015047][338 ms][DEBUG] SU: done in 337 ms; outu0_a118 5496 1773 24047656 96656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:47:05][351334332015047][338 ms][DEBUG] targetPkg: running [2025-09-08 23:47:05][351334332015047][338 ms][DEBUG] END check_scloud in 337 ms [2025-09-08 23:47:05][351334332015047][338 ms][DEBUG] START check_boot_completed [2025-09-08 23:47:05][351334332015047][338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:47:05][351334332015047][369 ms][DEBUG] ADB: done in 31 ms; out [2025-09-08 23:47:05][351334332015047][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:47:05][351334332015047][417 ms][DEBUG] SU: done in 48 ms; out [2025-09-08 23:47:05][351334332015047][417 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-08 23:47:05][351334332015047][417 ms][DEBUG] rawBody.length=1160 [2025-09-08 23:47:05][351334332015047][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351334332015047\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"USC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7050\"}'\'' -e'"" [2025-09-08 23:47:05][351334332015047][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:47:05][351334332015047][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351334332015047\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"USC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7050\"}'\'' -e'"" [2025-09-08 23:47:11][351334332015047][6696 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c631fa68-59c7-43f5-b2b2-37409b3dc106","id":"QR_c631fa68-59c7-43f5-b2b2-37409b3dc106","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:47:11][351334332015047][6852 ms][DEBUG] proc_open done in 6435 ms; code=255; res.len=3343 [2025-09-08 23:47:11][351334332015047][6852 ms][DEBUG] END runCmdUntilRes#1 in 6435 ms [2025-09-08 23:47:11][351334332015047][6852 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:47:15][351334332015047][0 ms][INFO] === Request start === [2025-09-08 23:47:15][351334332015047][1 ms][DEBUG] START check_scloud [2025-09-08 23:47:15][351334332015047][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:47:15][351334332015047][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 5496 1773 24187068 107604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:47:15][351334332015047][322 ms][DEBUG] targetPkg: running [2025-09-08 23:47:15][351334332015047][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-08 23:47:15][351334332015047][322 ms][DEBUG] START check_boot_completed [2025-09-08 23:47:15][351334332015047][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:47:15][351334332015047][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 23:47:15][351334332015047][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:47:15][351334332015047][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-08 23:47:15][351334332015047][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-08 23:47:15][351334332015047][416 ms][DEBUG] rawBody.length=1150 [2025-09-08 23:47:15][351334332015047][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351334332015047\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"USC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9950\"}'\'' -e'"" [2025-09-08 23:47:15][351334332015047][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:47:15][351334332015047][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351334332015047\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"USC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9950\"}'\'' -e'"" [2025-09-08 23:47:19][351334332015047][4258 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b18c009-2bd4-4614-9c14-93b99e686cd2","id":"QR_1b18c009-2bd4-4614-9c14-93b99e686cd2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:47:19][351334332015047][4414 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-08 23:47:19][351334332015047][4414 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-08 23:47:19][351334332015047][4415 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:48:05][350437730286424][0 ms][INFO] === Request start === [2025-09-08 23:48:05][350437730286424][1 ms][DEBUG] START check_scloud [2025-09-08 23:48:05][350437730286424][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:48:05][350437730286424][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 5496 1773 24274172 118596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:48:05][350437730286424][326 ms][DEBUG] targetPkg: running [2025-09-08 23:48:05][350437730286424][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-08 23:48:05][350437730286424][326 ms][DEBUG] START check_boot_completed [2025-09-08 23:48:05][350437730286424][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:48:05][350437730286424][373 ms][DEBUG] ADB: done in 46 ms; out [2025-09-08 23:48:05][350437730286424][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:48:05][350437730286424][466 ms][DEBUG] SU: done in 94 ms; out [2025-09-08 23:48:05][350437730286424][467 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-08 23:48:05][350437730286424][467 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 23:48:05][350437730286424][638 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1189\nsuccessfulTxPacketsPerSecond: 0.16807529773338456\nretriedTxPackets: 199\nretriedTxPacketsPerSecond: 0.024010756819054936\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1187\nsuccessfulRxPacketsPerSecond: 0.16807529773338456\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 23:48:05][350437730286424][638 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 23:48:07][350437730286424][2263 ms][DEBUG] SU: done in 1625 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.738/199.738/199.738/0.000 ms\n [2025-09-08 23:48:07][350437730286424][2263 ms][DEBUG] check_internet: online [2025-09-08 23:48:07][350437730286424][2263 ms][DEBUG] rawBody.length=1160 [2025-09-08 23:48:07][350437730286424][2263 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350437730286424\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2853\"}'\'' -e'"" [2025-09-08 23:48:07][350437730286424][2263 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:48:07][350437730286424][2263 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350437730286424\",\"model\":\"SM-A065M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2853\"}'\'' -e'"" [2025-09-08 23:48:12][350437730286424][7511 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4efa5b70-1bef-4e35-b7be-2ce70545ebe2","id":"QR_4efa5b70-1bef-4e35-b7be-2ce70545ebe2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:48:12][350437730286424][7668 ms][DEBUG] proc_open done in 5405 ms; code=255; res.len=3343 [2025-09-08 23:48:12][350437730286424][7668 ms][DEBUG] END runCmdUntilRes#1 in 5405 ms [2025-09-08 23:48:12][350437730286424][7668 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:54:05][355707113524715][1 ms][INFO] === Request start === [2025-09-08 23:54:05][355707113524715][1 ms][DEBUG] START check_scloud [2025-09-08 23:54:05][355707113524715][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:54:05][355707113524715][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 5496 1773 24431072 129800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:54:05][355707113524715][310 ms][DEBUG] targetPkg: running [2025-09-08 23:54:05][355707113524715][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-08 23:54:05][355707113524715][310 ms][DEBUG] START check_boot_completed [2025-09-08 23:54:05][355707113524715][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:54:05][355707113524715][372 ms][DEBUG] ADB: done in 62 ms; out [2025-09-08 23:54:05][355707113524715][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:54:05][355707113524715][435 ms][DEBUG] SU: done in 63 ms; out [2025-09-08 23:54:05][355707113524715][435 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-08 23:54:05][355707113524715][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 23:54:05][355707113524715][544 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1303\nsuccessfulTxPacketsPerSecond: 0.371719332339908\nretriedTxPackets: 229\nretriedTxPacketsPerSecond: 0.09782087693155474\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1289\nsuccessfulRxPacketsPerSecond: 0.3325909815672861\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 23:54:05][355707113524715][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 23:54:07][355707113524715][1778 ms][DEBUG] SU: done in 1234 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.988/203.988/203.988/0.000 ms\n [2025-09-08 23:54:07][355707113524715][1779 ms][DEBUG] check_internet: online [2025-09-08 23:54:07][355707113524715][1779 ms][DEBUG] rawBody.length=1160 [2025-09-08 23:54:07][355707113524715][1779 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707113524715\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2812\"}'\'' -e'"" [2025-09-08 23:54:07][355707113524715][1779 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:54:07][355707113524715][1779 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707113524715\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2812\"}'\'' -e'"" [2025-09-08 23:54:11][355707113524715][6402 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d3d1b538-0ee3-43c7-ac6c-e6ffeded788a","id":"QR_d3d1b538-0ee3-43c7-ac6c-e6ffeded788a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:54:11][355707113524715][6559 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-09-08 23:54:11][355707113524715][6559 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-08 23:54:11][355707113524715][6559 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-08 23:54:15][355707113524715][0 ms][INFO] === Request start === [2025-09-08 23:54:15][355707113524715][1 ms][DEBUG] START check_scloud [2025-09-08 23:54:15][355707113524715][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-08 23:54:15][355707113524715][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 5496 1773 24610344 140860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-08 23:54:15][355707113524715][313 ms][DEBUG] targetPkg: running [2025-09-08 23:54:15][355707113524715][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-08 23:54:15][355707113524715][313 ms][DEBUG] START check_boot_completed [2025-09-08 23:54:15][355707113524715][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-08 23:54:15][355707113524715][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-08 23:54:15][355707113524715][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-08 23:54:15][355707113524715][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-08 23:54:15][355707113524715][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-08 23:54:15][355707113524715][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-08 23:54:15][355707113524715][532 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=17674981 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1303\nsuccessfulTxPacketsPerSecond: 0.371719332339908\nretriedTxPackets: 229\nretriedTxPacketsPerSecond: 0.09782087693155474\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1289\nsuccessfulRxPacketsPerSecond: 0.3325909815672861\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-08 23:54:15][355707113524715][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-08 23:54:16][355707113524715][907 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.176.206) 56(84) bytes of data.\n64 bytes from lga34s37-in-f14.1e100.net (142.250.176.206): icmp_seq=1 ttl=114 time=260 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 260.089/260.089/260.089/0.000 ms\n [2025-09-08 23:54:16][355707113524715][907 ms][DEBUG] check_internet: online [2025-09-08 23:54:16][355707113524715][907 ms][DEBUG] rawBody.length=1150 [2025-09-08 23:54:16][355707113524715][907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707113524715\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6453\"}'\'' -e'"" [2025-09-08 23:54:16][355707113524715][907 ms][DEBUG] START runCmdUntilRes#1 [2025-09-08 23:54:16][355707113524715][907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707113524715\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6453\"}'\'' -e'"" [2025-09-08 23:54:20][355707113524715][4671 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c87925f4-d510-4311-972c-1c25ab76ab61","id":"QR_c87925f4-d510-4311-972c-1c25ab76ab61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-08 23:54:20][355707113524715][4828 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-08 23:54:20][355707113524715][4828 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-09-08 23:54:20][355707113524715][4828 ms][INFO] SUCCESS response from frida (len=3343)